🐛 Add STS dependency for IRSA/web identity token S3 auth (#9928)

The S3 storage backend uses DefaultCredentialsProvider which includes
  WebIdentityTokenFileCredentialsProvider in its chain. However, that
  provider requires software.amazon.awssdk/sts on the classpath to call
  AssumeRoleWithWebIdentity. Without it, the provider silently fails and
  credentials cannot be resolved when using IRSA on EKS.

  Closes #9927

  Signed-off-by: Joshua C <joshua.cullum@gmail.com>

Co-authored-by: Joshua C <joshua.c@data-edge.co.uk>
Co-authored-by: Andrey Antukh <niwi@niwi.nz>
This commit is contained in:
Josh Cullum 2026-06-01 09:06:18 +01:00 committed by GitHub
parent 61d44a374a
commit 156c888e2d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -67,7 +67,8 @@
;; Pretty Print specs
pretty-spec/pretty-spec {:mvn/version "0.1.4"}
software.amazon.awssdk/s3 {:mvn/version "2.44.4"}}
software.amazon.awssdk/s3 {:mvn/version "2.44.4"}
software.amazon.awssdk/sts {:mvn/version "2.44.4"}}
:paths ["src" "resources" "target/classes"]
:aliases