Support IAM Roles for Service Accounts in EKS

atomita / fluent-plugin-aws-elasticsearch-service

This repository is extends of https://github.com/uken/fluent-plugin-elasticsearch/ which made connectable to Amazon Elassticsearch Service using Aws Signers V4. Please check the requirements to connect to Amazon Elassticsearch Service without using Aws Signers V4 for before starting use. (reference https://groups.google.com/forum/#!msg/fluentd/uW87VAOqxeE/cfhenicEBAAJ)

MIT License

122 stars 49 forks source link

Support IAM Roles for Service Accounts in EKS #60

Closed mananyuki closed 5 years ago

mananyuki commented 5 years ago

Hello, I'm using your plugin on EKS. AWS has released the new feature for EKS. When I was migrating to this, I found something that didn't work with your plugin. This feature uses OIDC JSON web token so Aws::AssumeRoleCredentials could not get IAM Roles... So I modified your plugin to use Aws::AssumeRoleWebIdentityCredentials if web token exists.

mananyuki commented 5 years ago

@cosmo0920 Thanks for the review. I will write an example configuration in the README.

mananyuki commented 5 years ago

I wrote an example configuration in the README. Please review again 😄