Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need to be able to specify session duration properly #83

Open
ngamber opened this issue Jul 12, 2022 · 0 comments
Open

Need to be able to specify session duration properly #83

ngamber opened this issue Jul 12, 2022 · 0 comments

Comments

@ngamber
Copy link

ngamber commented Jul 12, 2022

Problem

We noticed while using the opensearch plugin that when STS credentials are created using similar logic as this plugin, a session duration isn't specified, and so despite a much longer maximum session duration on the role itself, they default to 1 hour, which overwhelms the IAM role assumption role throttling built into AWS ES when using a large number of assume role calls on a domain.
...

Steps to replicate

fluent/fluent-plugin-opensearch#68
Same thing would be present for any config using assume_role_arn in their stanza.

Expected Behavior or What you need to ask

We would like to have the option to specify and pass on duration_seconds to the STS credential provider here:

https://github.com/atomita/fluent-plugin-aws-elasticsearch-service/blob/master/lib/fluent/plugin/out_aws-elasticsearch-service.rb#L99

...

Using Fluentd and ES plugin versions

Fluentd v1.14.4
fluent-plugin-aws-elasticsearch-service 2.4.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant