Skip to content

Conversation

@PettitWesley
Copy link
Contributor

This is the fourth in a series of pull requests to add comprehensive support for AWS credentials in Fluent Bit.

This PR should be reviewed after #1852

This pull request adds support for 1 provider:

  • AWS Profile: read from the shared credentials file

AWS Credential Provider Check List:

  • Environment Variables
  • Shared Credentials File (AWS Profile)
  • EKS/Kubernetes OIDC tokens
  • EC2 Instance Metadata Service
  • ECS Credentials Endpoint
  • Standard Chained Provider
  • STS Assume Role

Signed-off-by: Wesley Pettit <wppttt@amazon.com>
Added three credentials providers:
 - EKS: Obtain credentials via sts:AssumeRoleWithWebIdentity using a k8s OIDC token
 - STS: Given a base set of credentials, obtain a new set with sts:AssumeRole
 - ENV: Standard environment variables for credentials

Signed-off-by: Wesley Pettit <wppttt@amazon.com>
Signed-off-by: Wesley Pettit <wppttt@amazon.com>
Signed-off-by: Wesley Pettit <wppttt@amazon.com>
Signed-off-by: Wesley Pettit <wppttt@amazon.com>
Signed-off-by: Wesley Pettit <wppttt@amazon.com>
Signed-off-by: Wesley Pettit <wppttt@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant