Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: Support Workload Identity Federation on AWS Fargate #1594

Open
aaleksandrov opened this issue Jul 16, 2023 · 0 comments
Open
Labels
priority: p3 Desirable enhancement or fix. May not be included in next release. type: feature request ‘Nice-to-have’ improvement, new feature or different behavior or design.

Comments

@aaleksandrov
Copy link

aaleksandrov commented Jul 16, 2023

Is your feature request related to a problem? Please describe.
We run some workloads on AWS Fargate, these workloads communicate to Bigquery. At the moment we can't use Workload Identity Federation because Fargate has neither Metadata endpoint, nor environment variables like AWS_ACCESS_KEY or AWS_SECRET_ACCESS_KEY, on Fargate credentials obtained using an environment variable AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.
So we have to provision service account keys, secure them, rotate them etc

Describe the solution you'd like
I'd like to use Workload Identity Federation and not worry about service account keys.

Describe alternatives you've considered
Running EC2 instead of Fargate

Additional context
There are some workarounds in internet like https://stackoverflow.com/questions/70194948/connection-error-from-aws-fargete-to-gcp-bigquery-by-using-workload-identity (for Python). they all require patching auth logic

@aaleksandrov aaleksandrov added priority: p3 Desirable enhancement or fix. May not be included in next release. type: feature request ‘Nice-to-have’ improvement, new feature or different behavior or design. labels Jul 16, 2023
@danielbankhead danielbankhead changed the title Feature request: Support Workload Identity Fedearion on AWS Fargate Feature request: Support Workload Identity Federation on AWS Fargate Aug 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
priority: p3 Desirable enhancement or fix. May not be included in next release. type: feature request ‘Nice-to-have’ improvement, new feature or different behavior or design.
Projects
None yet
Development

No branches or pull requests

1 participant