AWS_CONTAINER_CREDENTIALS_FULL_URI not working when used as Greengrass component

[teemuvayrynen-elisa]

Describe the question/issue

We are currently getting error of

AWS_CONTAINER_CREDENTIALS_FULL_URI must be set to an https:// address or a link local IP address. Found protocol=http, host=localhost, port=37085, path=/2016-11-01/credentialprovider/

when running aws-for-fluent-bit image as a greengrass component. This is related to #811 issue, where token exchange service is running locally on the IoT device.

The credentials url with local token exhange service will use by default http and doesn't include configuration parameters for enabling https.

Fluent Bit Version Info

Latest

[ShelbyZ]

We would need to work in a new override to allow additional URL schema into accepted URIs in the upstream here - https://github.com/fluent/fluent-bit/blob/d3be337b578b503acf3c581a99c60925f99904da/src/aws/flb_aws_credentials_http.c#L56-L78

From AWS Greengrass, it looks like the URL ends with /2016-11-01/credentialprovider/

https://github.com/aws-greengrass/aws-greengrass-nucleus/blame/57e3168da1b125323da73d56750f339b0fd1a034/src/main/java/com/aws/greengrass/tes/HttpServerImpl.java#L15