search

Aiven-Open / gcs-connector-for-apache-kafka

Aiven's GCS Sink Connector for Apache Kafka®
Apache License 2.0
70 stars 38 forks source link

Autodiscover Credentials with Workload Identity Broken Since v0.10.0 #374

Open dave-pollock opened 1 month ago

dave-pollock commented 1 month ago

I'm running Kafka Connect in GKE and using Workload Identity to provision a GCP service account into the container. This is working perfectly on v0.9.1.

Attempting to upgrade to v0.10.0 with the exact same config I get the following error:

Caused by: com.google.api.client.http.HttpResponseException: 401 Unauthorized

I've also tried v0.11.0 and v0.13.0. I then downgraded back to v0.9.1 and everything is fine.

Could perhaps be related to this change? https://github.com/Aiven-Open/gcs-connector-for-apache-kafka/commit/ff3a51d9d7af607c67b108e2469ac1f7aa1fd175#diff-6c787db8b668bb3e6986238c0a507af75dbbefae041b407ba029b4e3f1f33e43R329-R335

martinzuern commented 1 month ago

I believe this was fixed with #292 however not yet released. @jeqo @ivanyu is there any way to build a new release soon?