Travis Bischel

--mode=container PR was closed due to conflicting things, this was reopened

Is the expectation that people will also fixup their deploy scripts to remove any `--sandbox` or other dev specific flags they have already set?

https://buildkite.com/redpanda/redpanda/builds/13690#01826ed3-0a44-4d24-8436-05555f320793/6-6670 This branch (https://github.com/redpanda-data/redpanda/pull/5841) has the PR #5610 above.

As a little bit of self promotion, my [franz-go](https://github.com/twmb/franz-go) client has EOS support, if the problem for supporting EOS in goka is due to sarama's lack of EOS support.

FWIW I think that sqlite3 can suffice here with `.import table` and aggregating based off that. The output of xsv can be fed into sqlite3. As well, the output of...

Access key and secret key are required, that's effectively your use and pass. Session token is not.

AFAIK, Java clients still load the access key / secret key, they just do this automatically by checking relevant environment variables or checking your ~/.aws/credentials automatically. The aws Go library...

Do you have any of the credentials located anywhere in options 1 through 7 as described in https://github.com/aws/aws-msk-iam-auth#configuring-a-kafka-client-to-use-aws-iam ?

Ok, so this is specific to the AWS library doing a lot of magic behind the scenes to try every possible way to load keys. The aws-sdk-go package provides some...

Maybe related, perhaps from the underlying gokrb5 library? https://github.com/jcmturner/gokrb5/issues/367 perhaps https://github.com/jcmturner/gokrb5/issues/161 (I haven't read into these issues in depth, kerberos is a bit of a black box to me)