You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Solved my problem from #34, the problem was that even though the gradle job should have access to S3 to GET/PUT etc, it was being denied because it couldn't use its AWS WebToken effectively, only because the STS jar wasn't on the classpath.
Warning is: Unable to load credentials from WebIdentityTokenCredentialsProvider: To use assume role profiles the aws-java-sdk-sts module must be on the class path.
IRSA is a growing pattern with AWS Kubernetes deployments where it uses an OIDC flow to authenticate:
Solved my problem from #34, the problem was that even though the gradle job should have access to S3 to GET/PUT etc, it was being denied because it couldn't use its AWS WebToken effectively, only because the STS jar wasn't on the classpath.
So if you add it as a dependency it will work:
classpath 'com.amazonaws:aws-java-sdk-sts:1.11.751'
Warning is:
Unable to load credentials from WebIdentityTokenCredentialsProvider: To use assume role profiles the aws-java-sdk-sts module must be on the class path.
IRSA is a growing pattern with AWS Kubernetes deployments where it uses an OIDC flow to authenticate:
https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/
The text was updated successfully, but these errors were encountered: