eks use aws web identity token for SQS queue

[prabodh1194]

Hi,

I have an EKS cluster and I want to create a SQS integration source on this. The docs suggest that I configure AWS secrets for auth purpose. However, my other pods actually use the service account based auth wherein EKS automounts a web identity token on my pod and then all AWS services use those by default.

How can I configure the IntegrationSource in a similar manner?

Thank you.

[christophd]

Hi, there is the option to set

• CAMEL_KAMELET_AWS_SQS_SOURCE_USE_DEFAULT_CREDENTIALS_PROVIDER=true

in combination with

• CAMEL_KAMELET_AWS_SQS_SOURCE_USE_SESSION_CREDENTIALS=true

The SQS client should expect to use session credentials then. This is useful in situation in which the user needs to assume an IAM role for doing operations in SQS.

You can then set

• CAMEL_KAMELET_AWS_SQS_SOURCE_SESSION_TOKEN=<the_sessionToken>

via secretRefValue for instance.

Is this something you are looking for?

[prabodh1194]

hmm. looking good. i'll need to try using this.