S3 bucket Access Denied when retrieving credentials using Amazon EKS Pod Identity about thanos HOT 4 OPEN

Now it seems that https://github.com/minio/minio-go started supporting EKS Pod Identity since it merged minio/minio-go#1944 into its master branch.

I hope the EKS Pod Identity-supported minio/minio-go version, will be released soon and that Thanos will use it and then release its new version.

from thanos.

I think it is a valid request.
IIUC, Thanos doesn't support it right now. We rely on the underlying https://github.com/minio/minio-go to support this feature first.

From the current minio go SDK code, https://github.com/minio/minio-go/blob/de3d4928ef180eb8ca2eb7a15c0ced7a2f8ec667/pkg/credentials/iam_aws.go#L69 I don't see the new EKS pod identity is supported.

AI:

• Open a feature request on minio-go Github repository

from thanos.

@here, I am also facing similar issues post upgrading thanos from 0.31.0 to 0.32.3.

from thanos.

Thanks for the update @takuan-osho. Let's wait for minio go to release a new version which includes that change first.
Then we can pull that change in ASAP at least in main branch.

from thanos.