From ba9841ce25cb545aaa685c526e38786c58fed43e Mon Sep 17 00:00:00 2001 From: Adam Snyder Date: Sun, 14 Jan 2024 13:43:34 -0800 Subject: [PATCH 1/2] feat(credential-provider-imds): support ECS and EKS credential uris This enables the use of EKS Pod Identities in EKS --- packages/credential-provider-imds/src/fromContainerMetadata.ts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/packages/credential-provider-imds/src/fromContainerMetadata.ts b/packages/credential-provider-imds/src/fromContainerMetadata.ts index 0336931c361..27d817d2275 100644 --- a/packages/credential-provider-imds/src/fromContainerMetadata.ts +++ b/packages/credential-provider-imds/src/fromContainerMetadata.ts @@ -59,6 +59,9 @@ const CMDS_IP = "169.254.170.2"; const GREENGRASS_HOSTS = { localhost: true, "127.0.0.1": true, + "169.254.170.2": true, // IPv4 address for the ECS container + "169.254.170.23": true, // IPv4 address for the EKS container + "fd00:ec2::23": true, // IPv6 address for the EKS container }; const GREENGRASS_PROTOCOLS = { "http:": true, From 5fdf076d6a1a92fdc35a981267c8fa003fed3d64 Mon Sep 17 00:00:00 2001 From: Adam Snyder Date: Sun, 14 Jan 2024 13:51:28 -0800 Subject: [PATCH 2/2] chore: add changeset for ecs and eks credential uri overrides --- .changeset/silent-ears-film.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/silent-ears-film.md diff --git a/.changeset/silent-ears-film.md b/.changeset/silent-ears-film.md new file mode 100644 index 00000000000..a0a6c819379 --- /dev/null +++ b/.changeset/silent-ears-film.md @@ -0,0 +1,5 @@ +--- +"@smithy/credential-provider-imds": minor +--- + +Support for ECS and EKS credential URI overrides, enabling the use of EKS Pod Identities on EKS