Hirevo / alexandrie

An alternative crate registry, implemented in Rust.
https://hirevo.github.io/alexandrie/
Apache License 2.0
493 stars 55 forks source link

Add `WebIdentityProvider` to AWS credentials chain #165

Open benfu-verses opened 1 year ago

benfu-verses commented 1 year ago

I am trying to run Alexandrie in Kubernetes but running into the issue where the default credentials chain does not use the injected IAM Roles for Service Account credential. The upstream issue is here: https://github.com/rusoto/rusoto/issues/1781

Could we add a custom chain provider that just includes the rusoto_sts::WebIdentityProvider::from_k8s_env() in the chain? Something like https://github.com/awslabs/coldsnap/issues/122#issuecomment-1112629793.

Alternatively, switching to the AWS Rust SDK would also fix this behavior by default.