1313import software .amazon .awssdk .auth .credentials .AwsCredentials ;
1414import software .amazon .awssdk .auth .credentials .AwsCredentialsProvider ;
1515import software .amazon .awssdk .auth .credentials .AwsCredentialsProviderChain ;
16- import software .amazon .awssdk .auth .credentials .ContainerCredentialsProvider ;
1716import software .amazon .awssdk .auth .credentials .DefaultCredentialsProvider ;
18- import software .amazon .awssdk .auth .credentials .InstanceProfileCredentialsProvider ;
1917import software .amazon .awssdk .auth .credentials .StaticCredentialsProvider ;
20- import software .amazon .awssdk .identity .spi .AwsCredentialsIdentity ;
21- import software .amazon .awssdk .identity .spi .ResolveIdentityRequest ;
22- import software .amazon .awssdk .services .sts .StsClient ;
23- import software .amazon .awssdk .services .sts .auth .StsAssumeRoleWithWebIdentityCredentialsProvider ;
24-
25- import software .amazon .awssdk .auth .signer .AwsS3V4Signer ;
26- import software .amazon .awssdk .core .signer .Signer ;
27- import software .amazon .awssdk .core .signer .NoOpSigner ;
28-
2918import software .amazon .awssdk .auth .signer .Aws4Signer ;
19+ import software .amazon .awssdk .auth .signer .AwsS3V4Signer ;
3020import software .amazon .awssdk .awscore .exception .AwsServiceException ;
21+ import software .amazon .awssdk .core .client .config .ClientOverrideConfiguration ;
3122import software .amazon .awssdk .core .client .config .SdkAdvancedClientOption ;
3223import software .amazon .awssdk .core .retry .RetryPolicy ;
33- import org .apache .http .client .utils .URIBuilder ;
24+ import software .amazon .awssdk .core .retry .conditions .RetryCondition ;
25+ import software .amazon .awssdk .core .signer .NoOpSigner ;
26+ import software .amazon .awssdk .core .signer .Signer ;
27+ import software .amazon .awssdk .http .apache .ApacheHttpClient ;
28+ import software .amazon .awssdk .http .apache .ProxyConfiguration ;
29+ import software .amazon .awssdk .identity .spi .AwsCredentialsIdentity ;
30+ import software .amazon .awssdk .identity .spi .ResolveIdentityRequest ;
31+ import software .amazon .awssdk .regions .Region ;
32+ import software .amazon .awssdk .services .s3 .S3Client ;
33+ import software .amazon .awssdk .services .s3 .S3ClientBuilder ;
34+ import software .amazon .awssdk .services .sts .StsClient ;
35+ import software .amazon .awssdk .services .sts .auth .StsAssumeRoleWithWebIdentityCredentialsProvider ;
36+ import software .amazon .awssdk .services .sts .model .AssumeRoleWithWebIdentityRequest ;
3437
3538import org .apache .http .HttpStatus ;
39+ import org .apache .http .client .utils .URIBuilder ;
3640import org .apache .logging .log4j .LogManager ;
3741import org .apache .logging .log4j .Logger ;
3842import org .elasticsearch .ElasticsearchException ;
5054import org .elasticsearch .watcher .FileWatcher ;
5155import org .elasticsearch .watcher .ResourceWatcherService ;
5256
53- import software .amazon .awssdk .core .client .config .ClientOverrideConfiguration ;
54- import software .amazon .awssdk .core .retry .conditions .RetryCondition ;
55- import software .amazon .awssdk .http .apache .ApacheHttpClient ;
56- import software .amazon .awssdk .http .apache .ProxyConfiguration ;
57- import software .amazon .awssdk .regions .Region ;
58- import software .amazon .awssdk .services .s3 .S3Client ;
59- import software .amazon .awssdk .services .s3 .S3ClientBuilder ;
60- import software .amazon .awssdk .services .sts .endpoints .internal .Value ;
61- import software .amazon .awssdk .services .sts .model .AssumeRoleWithWebIdentityRequest ;
62-
6357import java .io .Closeable ;
6458import java .io .IOException ;
6559import java .net .URI ;
@@ -222,8 +216,7 @@ protected S3ClientBuilder buildS3Client(S3ClientSettings clientSettings) {
222216 s3clientBuilder .region (Region .of (clientSettings .region ));
223217 }
224218 if (Strings .hasLength (clientSettings .endpoint )) {
225- s3clientBuilder
226- .endpointOverride (URI .create (clientSettings .endpoint ));
219+ s3clientBuilder .endpointOverride (URI .create (clientSettings .endpoint ));
227220 }
228221
229222 return s3clientBuilder ;
@@ -235,13 +228,13 @@ private Signer getSigner(S3ClientSettings.AwsSignerOverrideType signerOverrideTy
235228 return Aws4Signer .create ();
236229 } else if (signerOverrideType == S3ClientSettings .AwsSignerOverrideType .AWS3SignerType
237230 || signerOverrideType == S3ClientSettings .AwsSignerOverrideType .AwsS3V4Signer ) {
238- return AwsS3V4Signer .create ();
239- } else if (signerOverrideType == S3ClientSettings .AwsSignerOverrideType .NoOpSigner
240- || signerOverrideType == S3ClientSettings .AwsSignerOverrideType .NoOpSignerType ) {
241- return new NoOpSigner ();
242- } else {
243- return null ;
244- }
231+ return AwsS3V4Signer .create ();
232+ } else if (signerOverrideType == S3ClientSettings .AwsSignerOverrideType .NoOpSigner
233+ || signerOverrideType == S3ClientSettings .AwsSignerOverrideType .NoOpSignerType ) {
234+ return new NoOpSigner ();
235+ } else {
236+ return null ;
237+ }
245238 }
246239
247240 private ApacheHttpClient .Builder buildHttpClient (S3ClientSettings clientSettings ) {
@@ -297,7 +290,8 @@ private static void applyProxyConfiguration(S3ClientSettings clientSettings, Apa
297290 .scheme (clientSettings .proxyScheme .getSchemeString ())
298291 .username (clientSettings .proxyUsername )
299292 .password (clientSettings .proxyPassword )
300- .build ());
293+ .build ()
294+ );
301295 }
302296 }
303297
@@ -472,18 +466,20 @@ static class CustomWebIdentityTokenCredentialsProvider implements AwsCredentials
472466
473467 securityTokenServiceClientBuilder .endpointOverride (URI .create (customStsEndpoint ));
474468 }
475- securityTokenServiceClientBuilder
476- .credentialsProvider (StaticCredentialsProvider .create (AwsBasicCredentials .create ("" , "" )));
469+ securityTokenServiceClientBuilder .credentialsProvider (StaticCredentialsProvider .create (AwsBasicCredentials .create ("" , "" )));
477470 securityTokenServiceClient = SocketAccess .doPrivileged (securityTokenServiceClientBuilder ::build );
478471
479472 try {
480- credentialsProvider = StsAssumeRoleWithWebIdentityCredentialsProvider .builder ().refreshRequest (
481- AssumeRoleWithWebIdentityRequest
482- .builder ()
483- .roleArn (roleArn )
484- .roleSessionName (roleSessionName )
485- .webIdentityToken (webIdentityTokenFileSymlink .toString ()).build ()
486- ).stsClient (securityTokenServiceClient ).build ();
473+ credentialsProvider = StsAssumeRoleWithWebIdentityCredentialsProvider .builder ()
474+ .refreshRequest (
475+ AssumeRoleWithWebIdentityRequest .builder ()
476+ .roleArn (roleArn )
477+ .roleSessionName (roleSessionName )
478+ .webIdentityToken (webIdentityTokenFileSymlink .toString ())
479+ .build ()
480+ )
481+ .stsClient (securityTokenServiceClient )
482+ .build ();
487483
488484 var watcher = new FileWatcher (webIdentityTokenFileSymlink );
489485 watcher .addListener (new FileChangesListener () {
@@ -536,7 +532,6 @@ public AwsCredentials resolveCredentials() {
536532 return credentialsProvider .resolveCredentials ();
537533 }
538534
539-
540535 @ Override
541536 public Class <AwsCredentialsIdentity > identityType () {
542537 Objects .requireNonNull (credentialsProvider , "credentialsProvider is not set" );
@@ -586,7 +581,6 @@ public AwsCredentials resolveCredentials() {
586581 }
587582 }
588583
589-
590584 @ Override
591585 public Class <AwsCredentialsIdentity > identityType () {
592586 return delegate .identityType ();
0 commit comments