oscerd commented on issue #1263:
URL:
https://github.com/apache/camel-kafka-connector/issues/1263#issuecomment-6632142568
Closing this as fixed. The original failure ("To use web identity tokens,
the 'sts' service module must be on the class path") happened because the
connector packages did not include the AWS SDK `sts` module; since 4.10.2 they
do, because Camel made `sts` a dependency of its AWS components
(https://issues.apache.org/jira/browse/CAMEL-21795), so
`camel-aws-s3-source-kafka-connector` 4.22.x with
`camel.kamelet.aws-s3-source.useDefaultCredentialsProvider=true` can use the
service account's web identity token (IRSA) without adding jars. The later "Not
authorized to perform sts:AssumeRoleWithWebIdentity" error is an IAM
configuration issue on the AWS side (for example the role's trust policy), and
on Confluent Platform images the 4.22.0 AWS connectors need one of the
workarounds in
https://camel.apache.org/camel-kafka-connector/next/contributor-guide/troubleshooting.html#aws-connectors-on-confluent-platform-images.
Documentation on the credential options is being discussed in #1785; if
web identity still fails on 4.22.x, please open a new issue with the
connector version, config and full stack trace.
---
_Claude Code on behalf of Andrea Cosentino_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
