add support for authentication with EKS Pod Identities #1944
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Steven <saweber@gmail.com>
harshavardhana
approved these changes
Mar 3, 2024
charithe
referenced
this pull request
in cerbos/cerbos
Apr 29, 2024
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [github.com/aws/aws-sdk-go](https://togithub.com/aws/aws-sdk-go) | `v1.51.25` -> `v1.51.30` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/bufbuild/buf](https://togithub.com/bufbuild/buf) | `v1.30.1` -> `v1.31.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/bufbuild/protovalidate-go](https://togithub.com/bufbuild/protovalidate-go) | `v0.6.1` -> `v0.6.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/jmoiron/sqlx](https://togithub.com/jmoiron/sqlx) | `v1.3.5` -> `v1.4.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/minio/minio-go/v7](https://togithub.com/minio/minio-go) | `v7.0.69` -> `v7.0.70` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/rivo/tview](https://togithub.com/rivo/tview) | `e119d15` -> `c766eef` | | | | | require | digest | | [github.com/rs/cors](https://togithub.com/rs/cors) | `v1.10.1` -> `v1.11.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://togithub.com/open-telemetry/opentelemetry-go-contrib) | `v0.50.0` -> `v0.51.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/contrib/instrumentation/host](https://togithub.com/open-telemetry/opentelemetry-go-contrib) | `v0.50.0` -> `v0.51.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://togithub.com/open-telemetry/opentelemetry-go-contrib) | `v0.50.0` -> `v0.51.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/contrib/instrumentation/runtime](https://togithub.com/open-telemetry/opentelemetry-go-contrib) | `v0.50.0` -> `v0.51.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/contrib/propagators/autoprop](https://togithub.com/open-telemetry/opentelemetry-go-contrib) | `v0.50.0` -> `v0.51.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/contrib/propagators/b3](https://togithub.com/open-telemetry/opentelemetry-go-contrib) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/prometheus](https://togithub.com/open-telemetry/opentelemetry-go) | `v0.47.0` -> `v0.48.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/metric](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/sdk](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/sdk/metric](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/trace](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.25.0` -> `v1.26.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [google.golang.org/protobuf](https://togithub.com/protocolbuffers/protobuf-go) | `c2a26e7` -> `c2b76ee` | | | | | require | digest | --- ### Release Notes <details> <summary>aws/aws-sdk-go (github.com/aws/aws-sdk-go)</summary> ### [`v1.51.30`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v15130-2024-04-26) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.51.29...v1.51.30) \=== ##### Service Client Updates - `service/codepipeline`: Updates service API and documentation - Add ability to manually and automatically roll back a pipeline stage to a previously successful execution. - `service/cognito-idp`: Updates service API and documentation - `service/connectcampaigns`: Updates service API and documentation - `service/entitlement.marketplace`: Updates service API - `service/oam`: Updates service API and documentation - `service/rds`: Updates service API, documentation, waiters, paginators, and examples - SupportsLimitlessDatabase field added to describe-db-engine-versions to indicate whether the DB engine version supports Aurora Limitless Database. - `service/support`: Updates service API - Releasing minor endpoint updates. ### [`v1.51.29`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v15129-2024-04-25) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.51.28...v1.51.29) \=== ##### Service Client Updates - `service/appsync`: Updates service API - `service/fms`: Updates service API and documentation - `service/ivs`: Updates service API and documentation - `service/ivs-realtime`: Updates service API - `service/rds`: Updates service API, documentation, waiters, paginators, and examples - Updates Amazon RDS documentation for setting local time zones for RDS for Db2 DB instances. - `service/states`: Updates service API and documentation - Add new ValidateStateMachineDefinition operation, which performs syntax checking on the definition of a Amazon States Language (ASL) state machine. ### [`v1.51.28`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v15128-2024-04-24) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.51.27...v1.51.28) \=== ##### Service Client Updates - `service/datasync`: Updates service API and documentation - `service/ec2`: Updates service API and documentation - Launching capability for customers to enable or disable automatic assignment of public IPv4 addresses to their network interface - `service/emr-containers`: Updates service API, documentation, and paginators - `service/entityresolution`: Updates service API and documentation - `service/gamelift`: Updates service API, documentation, and paginators - Amazon GameLift releases container fleets support for public preview. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. - `service/ssm`: Updates service API, documentation, and paginators - Add SSM DescribeInstanceProperties API to public AWS SDK. ### [`v1.51.27`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v15127-2024-04-23) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.51.26...v1.51.27) \=== ##### Service Client Updates - `service/bedrock`: Updates service API, documentation, and paginators - `service/bedrock-agent`: Updates service API and documentation - `service/bedrock-agent-runtime`: Updates service API and documentation - `service/bedrock-runtime`: Updates service API and documentation - `service/ce`: Updates service API and documentation - `service/ec2`: Updates service API and documentation - This release introduces EC2 AMI Deregistration Protection, a new AMI property that can be enabled by customers to protect an AMI against an unintended deregistration. This release also enables the AMI owners to view the AMI 'LastLaunchedTime' in DescribeImages API. - `service/pi`: Updates service documentation - `service/rds`: Updates service API, documentation, waiters, paginators, and examples - Fix the example ARN for ModifyActivityStreamRequest - `service/workspaces-web`: Updates service API and documentation ### [`v1.51.26`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v15126-2024-04-22) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.51.25...v1.51.26) \=== ##### Service Client Updates - `service/bedrock-agent`: Updates service API and documentation - `service/bedrock-agent-runtime`: Updates service API and documentation - `service/payment-cryptography`: Updates service API, documentation, and waiters - `service/redshift-serverless`: Updates service documentation - `service/route53profiles`: Adds new service - `service/sagemaker`: Updates service API and documentation - This release adds support for Real-Time Collaboration and Shared Space for JupyterLab App on SageMaker Studio. - `service/servicediscovery`: Updates service documentation and examples - `service/transfer`: Updates service API and documentation - Adding new API to support remote directory listing using SFTP connector </details> <details> <summary>bufbuild/buf (github.com/bufbuild/buf)</summary> ### [`v1.31.0`](https://togithub.com/bufbuild/buf/blob/HEAD/CHANGELOG.md#v1310---2024-04-23) [Compare Source](https://togithub.com/bufbuild/buf/compare/v1.30.1...v1.31.0) - Update dependencies. </details> <details> <summary>bufbuild/protovalidate-go (github.com/bufbuild/protovalidate-go)</summary> ### [`v0.6.2`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.6.2) [Compare Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.6.1...v0.6.2) #### What's Changed - Fix deprecated resolver by [@​rodaine](https://togithub.com/rodaine) in [https://github.com/bufbuild/protovalidate-go/pull/117](https://togithub.com/bufbuild/protovalidate-go/pull/117) **Full Changelog**: bufbuild/protovalidate-go@v0.6.1...v0.6.2 </details> <details> <summary>jmoiron/sqlx (github.com/jmoiron/sqlx)</summary> ### [`v1.4.0`](https://togithub.com/jmoiron/sqlx/releases/tag/v1.4.0): Update dependencies to their latest stable versions [Compare Source](https://togithub.com/jmoiron/sqlx/compare/v1.3.5...v1.4.0) This release has updated all dependencies to their latest stable version. And now, for the auto-generated description: *** #### What's Changed - Introduce CircleCI by [@​dlsniper](https://togithub.com/dlsniper) in [https://github.com/jmoiron/sqlx/pull/922](https://togithub.com/jmoiron/sqlx/pull/922) - Upgrade dependencies by [@​dlsniper](https://togithub.com/dlsniper) in [https://github.com/jmoiron/sqlx/pull/909](https://togithub.com/jmoiron/sqlx/pull/909) #### New Contributors - [@​dlsniper](https://togithub.com/dlsniper) made their first contribution at [https://github.com/jmoiron/sqlx/pull/922](https://togithub.com/jmoiron/sqlx/pull/922) **Full Changelog**: jmoiron/sqlx@v1.3.5...v1.4.0 </details> <details> <summary>minio/minio-go (github.com/minio/minio-go/v7)</summary> ### [`v7.0.70`](https://togithub.com/minio/minio-go/releases/tag/v7.0.70): Bugfix Release [Compare Source](https://togithub.com/minio/minio-go/compare/v7.0.69...v7.0.70) #### What's Changed - add support for authentication with EKS Pod Identities by [@​saweber](https://togithub.com/saweber) in [https://github.com/minio/minio-go/pull/1944](https://togithub.com/minio/minio-go/pull/1944) - Allow disabling dual-stack endpoints for Amazon S3 by [@​narqo](https://togithub.com/narqo) in [https://github.com/minio/minio-go/pull/1945](https://togithub.com/minio/minio-go/pull/1945) - Added `x-minio-replication-actual-object-size` to allowed headers by [@​shtripat](https://togithub.com/shtripat) in [https://github.com/minio/minio-go/pull/1946](https://togithub.com/minio/minio-go/pull/1946) - Update vulncheck Go version to 1.22.x by [@​klauspost](https://togithub.com/klauspost) in [https://github.com/minio/minio-go/pull/1953](https://togithub.com/minio/minio-go/pull/1953) - fix: non md5 etags by [@​niger-prequel](https://togithub.com/niger-prequel) in [https://github.com/minio/minio-go/pull/1952](https://togithub.com/minio/minio-go/pull/1952) - Bump golang.org/x/net from 0.21.0 to 0.23.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/minio/minio-go/pull/1954](https://togithub.com/minio/minio-go/pull/1954) - Bump golang.org/x/net from 0.21.0 to 0.23.0 in /examples/minio by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/minio/minio-go/pull/1955](https://togithub.com/minio/minio-go/pull/1955) - remove sha256-simd support we do not need it anymore by [@​harshavardhana](https://togithub.com/harshavardhana) in [https://github.com/minio/minio-go/pull/1958](https://togithub.com/minio/minio-go/pull/1958) #### New Contributors - [@​saweber](https://togithub.com/saweber) made their first contribution in [https://github.com/minio/minio-go/pull/1944](https://togithub.com/minio/minio-go/pull/1944) - [@​narqo](https://togithub.com/narqo) made their first contribution in [https://github.com/minio/minio-go/pull/1945](https://togithub.com/minio/minio-go/pull/1945) - [@​niger-prequel](https://togithub.com/niger-prequel) made their first contribution in [https://github.com/minio/minio-go/pull/1952](https://togithub.com/minio/minio-go/pull/1952) **Full Changelog**: minio/minio-go@v7.0.68...v7.0.70 </details> <details> <summary>rs/cors (github.com/rs/cors)</summary> ### [`v1.11.0`](https://togithub.com/rs/cors/compare/v1.10.1...v1.11.0) [Compare Source](https://togithub.com/rs/cors/compare/v1.10.1...v1.11.0) </details> <details> <summary>open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/propagators/b3)</summary> ### [`v1.26.0`](https://togithub.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.26.0): /v0.51.0/v0.20.0/v0.6.0/v0.1.0 [Compare Source](https://togithub.com/open-telemetry/opentelemetry-go-contrib/compare/v1.25.0...v1.26.0) ##### Added - `NewSDK` in `go.opentelemetry.io/contrib/config` now returns a configured SDK with a valid `MeterProvider`. ([#​4804](https://togithub.com/open-telemetry/opentelemetry-go-contrib/issues/4804)) ##### Changed - Change the scope name for the prometheus bridge to `go.opentelemetry.io/contrib/bridges/prometheus` to match the package. ([#​5396](https://togithub.com/open-telemetry/opentelemetry-go-contrib/issues/5396)) ##### Fixed - Fix bug where an empty exemplar was added to counters in `go.opentelemetry.io/contrib/bridges/prometheus`. ([#​5395](https://togithub.com/open-telemetry/opentelemetry-go-contrib/issues/5395)) - Fix bug where the last histogram bucket was missing in `go.opentelemetry.io/contrib/bridges/prometheus`. ([#​5395](https://togithub.com/open-telemetry/opentelemetry-go-contrib/issues/5395)) **Full Changelog**: open-telemetry/opentelemetry-go-contrib@v1.25.0...v1.26.0 </details> <details> <summary>open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)</summary> ### [`v1.26.0`](https://togithub.com/open-telemetry/opentelemetry-go/releases/tag/v1.26.0): /v0.48.0/v0.2.0-alpha [Compare Source](https://togithub.com/open-telemetry/opentelemetry-go/compare/v1.25.0...v1.26.0) ##### Added - Add `Recorder` in `go.opentelemetry.io/otel/log/logtest` to facilitate testing the log bridge implementations. ([#​5134](https://togithub.com/open-telemetry/opentelemetry-go/issues/5134)) - Add span flags to OTLP spans and links exported by `go.opentelemetry.io/otel/exporters/otlp/otlptrace`. ([#​5194](https://togithub.com/open-telemetry/opentelemetry-go/issues/5194)) - Make the initial alpha release of `go.opentelemetry.io/otel/sdk/log`. This new module contains the Go implementation of the OpenTelemetry Logs SDK. This module is unstable and breaking changes may be introduced. See our [versioning policy](VERSIONING.md) for more information about these stability guarantees. ([#​5240](https://togithub.com/open-telemetry/opentelemetry-go/issues/5240)) - Make the initial alpha release of `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. This new module contains an OTLP exporter that transmits log telemetry using HTTP. This module is unstable and breaking changes may be introduced. See our [versioning policy](VERSIONING.md) for more information about these stability guarantees. ([#​5240](https://togithub.com/open-telemetry/opentelemetry-go/issues/5240)) - Make the initial alpha release of `go.opentelemetry.io/otel/exporters/stdout/stdoutlog`. This new module contains an exporter prints log records to STDOUT. This module is unstable and breaking changes may be introduced. See our [versioning policy](VERSIONING.md) for more information about these stability guarantees. ([#​5240](https://togithub.com/open-telemetry/opentelemetry-go/issues/5240)) - The `go.opentelemetry.io/otel/semconv/v1.25.0` package. The package contains semantic conventions from the `v1.25.0` version of the OpenTelemetry Semantic Conventions. ([#​5254](https://togithub.com/open-telemetry/opentelemetry-go/issues/5254)) ##### Changed - Update `go.opentelemetry.io/proto/otlp` from v1.1.0 to v1.2.0. ([#​5177](https://togithub.com/open-telemetry/opentelemetry-go/issues/5177)) - Improve performance of baggage member character validation in `go.opentelemetry.io/otel/baggage`. ([#​5214](https://togithub.com/open-telemetry/opentelemetry-go/issues/5214)) **Full Changelog**: open-telemetry/opentelemetry-go@v1.25.0...v1.26.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/cerbos/cerbos). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMjEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjMyMS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhcmVhL2RlcGVuZGVuY2llcyIsImJvdHMiLCJraW5kL2Nob3JlIl19--> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2 tasks
](https://renovatebot.com){kind=link}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This adds support for AWS EKS Pod Identities. This allows a Kubernetes pod to use an pod-specific IAM role for S3.
Issue has been previously brought up here: #1940
I have tested our application(Kubecost) manually with a cluster configured with only pod identity for authentication available and this works as I would expect.
Feedback would be greatly appreciated!