Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Smartstore: pod roles - regional sts endpoint #1325

Closed
dnavaraWH opened this issue Apr 25, 2024 · 3 comments
Closed

Smartstore: pod roles - regional sts endpoint #1325

dnavaraWH opened this issue Apr 25, 2024 · 3 comments
Assignees
Labels
smartstore Smartstore related to-close

Comments

@dnavaraWH
Copy link

Please select the type of request

Enhancement

Tell us more

Describe the request

I am trying to authenticate to SmartStore using IAM role ( pod roles) instead of IAM USER, however as our cluster is in eu-west-1 we can/want to only use sts.eu-west-1.amazonaws.com endpoint.

It looks like default behaviour is however sts.amazonaws.com, and there seems to be no way to change this.

We are seeing the following error:
ERROR AwsCredentials - Failed to execute runSync() for transaction with uri=https://sts.amazonaws.com/ http_code=502

Expected behavior
I want to be able to set regional sts just like it's done in Splunk add on for AWS

Splunk setup on K8S
SOK 2.4.0
Splunk 9.1.2

Reproduction/Testing steps
Create cluster in eu-west-1 region and don't allow it to talk to us-east-1 via web proxy

K8s environment
K8s v1.28.5-eks-5e0fdde.
SOK 2.4.0
Splunk 9.1.2

Proposed changes(optional)
Allow for regional sts endpoints

@dnavaraWH dnavaraWH added the smartstore Smartstore related label Apr 25, 2024
@dnavaraWH dnavaraWH changed the title Smartstore: pod roles Smartstore: pod roles - regional sts endpoint Apr 25, 2024
@vivekr-splunk
Copy link
Collaborator

@dnavaraWH this will be fixed in upcoming release of splunk enterprise planned for mid November

@akondur
Copy link
Collaborator

akondur commented Nov 13, 2024

Hi @dnavaraWH , the fix for AWS IRSA JWT token expiring has been fixed in splunk 9.3.2. Please try it and let us know if you are running into further issues.

@akondur
Copy link
Collaborator

akondur commented Dec 10, 2024

Closing this issue as its fixed in 9.3.2. @dnavaraWH Please re-open it if the issue is still pending.

@akondur akondur closed this as completed Dec 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
smartstore Smartstore related to-close
Projects
None yet
Development

No branches or pull requests

5 participants