search

splunk / splunk-operator

Splunk Operator for Kubernetes
Other
210 stars 115 forks source link

Smartstore: pod roles - regional sts endpoint #1325

Open dnavaraWH opened 7 months ago

dnavaraWH commented 7 months ago

Please select the type of request

Enhancement

Tell us more

Describe the request

I am trying to authenticate to SmartStore using IAM role ( pod roles) instead of IAM USER, however as our cluster is in eu-west-1 we can/want to only use sts.eu-west-1.amazonaws.com endpoint.

It looks like default behaviour is however sts.amazonaws.com, and there seems to be no way to change this.

We are seeing the following error: ERROR AwsCredentials - Failed to execute runSync() for transaction with uri=https://sts.amazonaws.com/ http_code=502

Expected behavior I want to be able to set regional sts just like it's done in Splunk add on for AWS

Splunk setup on K8S SOK 2.4.0 Splunk 9.1.2

Reproduction/Testing steps Create cluster in eu-west-1 region and don't allow it to talk to us-east-1 via web proxy

K8s environment K8s v1.28.5-eks-5e0fdde. SOK 2.4.0 Splunk 9.1.2

Proposed changes(optional) Allow for regional sts endpoints

vivekr-splunk commented 1 month ago

@dnavaraWH this will be fixed in upcoming release of splunk enterprise planned for mid November

akondur commented 1 week ago

Hi @dnavaraWH , the fix for AWS IRSA JWT token expiring has been fixed in splunk 9.3.2. Please try it and let us know if you are running into further issues.