Skip to content

Fix: Respect aws.endpointUrlSTS system property in StsCredentialsProvider #6300

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

akitnk
Copy link

@akitnk akitnk commented Jul 26, 2025

This is a fix for #6252

Motivation and Context

StsWebIdentityCredentialsProvider does not support properties to configure custom STS endpoint (like aws.endpointUrlSTS and AWS_ENDPOINT_URL_STS). Due to this problem, StsWebIdentityCredentialsProvider cannot access custom STS endpoint even if it is configured using those properties.

Modifications

Respect aws.endpointUrlSTS system property

Testing

Tested locally and confirmed it works as expected

Screenshots (if appropriate)

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)

Checklist

  • I have read the CONTRIBUTING document
  • Local run of mvn install succeeds
  • My code follows the code style of this project
  • My change requires a change to the Javadoc documentation
  • I have updated the Javadoc documentation accordingly
  • I have added tests to cover my changes
  • All new and existing tests passed
  • I have added a changelog entry. Adding a new entry must be accomplished by running the scripts/new-change script and following the instructions. Commit the new file created by the script in .changes/next-release with your changes.
  • My change is to implement 1.11 parity feature and I have updated LaunchChangelog ... No. Because 1.x does not support the service specific environment variable/property.

License

  • I confirm that this pull request can be released under the Apache 2 license

@akitnk akitnk marked this pull request as ready for review July 26, 2025 04:09
@akitnk akitnk requested a review from a team as a code owner July 26, 2025 04:09
@akitnk akitnk changed the title Fix: Respect aws.endpointUrlSTS system property Fix: Respect aws.endpointUrlSTS system property in StsCredentialsProvider Jul 26, 2025
@akitnk
Copy link
Author

akitnk commented Jul 29, 2025

Could someone give a comment on this? This issue needs to be fixed when user wants to use IRSA feature on EKS or other K8s platform in the environment which does not support public STS endpoint.
https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants