Skip to content

Support IRSA #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Mar 27, 2020
Merged

Support IRSA #24

merged 2 commits into from
Mar 27, 2020

Conversation

k-kinzal
Copy link
Contributor

Thanks for a very nice plugin!

I've added support for using IRSA in AWS EKS.

  • Changed the AWS SDK for Go version to the latest version that is greater than 1.23.13 with IRSA support
  • Changed to do the default credential reading of AWS SDK for Go the AccessKeyID ,SecretAccessKey and Credential are not defined.

Tested cases

I have checked the following cases to work with EKS v1.14 and fluent-bit v1.3.11.

Shared Credentials

[OUTPUT]
    Name         s3
    Match         kube.*
    Bucket        mybuckets
    Credential  /path/to/credentials
    S3Prefix     path/to
    Region        ap-northeast-1
    Compress  gzip

Static Credentials

[OUTPUT]
    Name                    s3
    Match                   kube.*
    Bucket                  mybuckets
    AccessKeyID        myaccesskey
    SecretAccessKey mysecretskey
    S3Prefix                path/to
    Region                  ap-northeast-1
    Compress             gzip

Environment Credentials

[OUTPUT]
    Name        s3
    Match       kube.*
    Bucket      mybuckets
    S3Prefix   path/to
    Region      ap-northeast-1
    Compress gzip
env:
  - name: AWS_ACCESS_KEY_ID
     value: myaccesskey
  - name: AWS_SECRET_ACCESS_KEY
     value: mysecretkey

I injected environment variables into the fluent-bit pod in kubernetes.

IRSA

[OUTPUT]
    Name        s3
    Match       kube.*
    Bucket      mybuckets
    S3Prefix   path/to
    Region      ap-northeast-1
    Compress gzip
serviceAccount: my-irsa-sa

I injected IRSA-enabled service account in kubernetes into fluent-bit's pod.

Copy link
Owner

@cosmo0920 cosmo0920 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great job. 💪 Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants