google-auth-library-java icon indicating copy to clipboard operation
google-auth-library-java copied to clipboard

Published 20 hours ago • verified publisher icon googleapis

Workload Identity Federation should support ECS Fargate container credentials

Open dwiajik opened this issue 3 years ago • 4 comments

Is your feature request related to a problem? Please describe. I am trying to use Workload Identity Federation on AWS ECS Fargate. It seems that AwsCredentials.getAwsSecurityCredentials (code) only supports EC2 metadata service and does not support ECS Fargate container credential URL.

Describe the solution you'd like Google auth SDK should support ECS Fargate container credential URL through environment variable AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.

Describe alternatives you've considered The alternative to use Workload Identity Federation on ECS Fargate is implementing the REST authentication myself.

dwiajik avatar Aug 01 '22 07:08 dwiajik

Google auth SDK should support ECS Fargate through environment variable AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.

And AWS_CONTAINER_CREDENTIALS_FULL_URI, too, please, so it can work in CloudShell

mdaniel avatar Aug 12 '22 18:08 mdaniel

+1 having same issue

ismailsimsek avatar Feb 01 '23 14:02 ismailsimsek

I provided a PR for this issue: #1374, feedback welcome!

jurgispods avatar Mar 07 '24 14:03 jurgispods