Skip to content
This repository was archived by the owner on Nov 11, 2025. It is now read-only.

Depend on com.amazonaws.aws-java-sdk-sts#86

Open
zyga wants to merge 1 commit into
eclipse-hawkbit:masterfrom
zyga:feature/sts
Open

Depend on com.amazonaws.aws-java-sdk-sts#86
zyga wants to merge 1 commit into
eclipse-hawkbit:masterfrom
zyga:feature/sts

Conversation

@zyga

@zyga zyga commented Feb 3, 2023

Copy link
Copy Markdown

This allows using real AWS S3 with a web identity token. See [1] for details. Absence of this dependency requires using less desired password-based authentication.

[1] https://github.com/aws/aws-sdk-java/blob/master/aws-java-sdk-core/src/main/java/com/amazonaws/auth/profile/internal/securitytoken/STSProfileCredentialsServiceLoader.java#L20

Signed-off-by: Zygmunt Krynicki me@zygoon.pl

This allows using real AWS S3 with a web identity token. See [1] for details.
Absence of this dependency requires using less desired password-based
authentication.

[1] https://github.com/aws/aws-sdk-java/blob/master/aws-java-sdk-core/src/main/java/com/amazonaws/auth/profile/internal/securitytoken/STSProfileCredentialsServiceLoader.java#L20

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
@hawkbit-bot

Copy link
Copy Markdown

Can one of the admins verify this patch?

@forsberg

Copy link
Copy Markdown

Was trying to use Web Based authentication with a custom AWS IAM Role when running hawkbit in AWS EKS Kubernetes cluster. Doing this is the best practice when it comes to providing AWS permissions for pods, but without this fix, it's not possible.

I.e, I confirm this is an important patch.

@zyga

zyga commented Jun 22, 2023

Copy link
Copy Markdown
Author

@stefbehl could we merge this?

@RomanGrekov

Copy link
Copy Markdown

Still actual

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants