[FEATURE] EKS Pod Identity support
- Dominant language
- Java
- Stars
- 3.2k
- Forks
- 935
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 298
Description
### Describe the feature
Currently, Apache Gravitino only supports IAM Roles for Service Accounts (IRSA) for AWS authentication within EKS clusters.
I would like to propose adding support for EKS Pod Identity. This modern authentication method simplifies credential management by allowing IAM roles to be mapped directly to Kubernetes Service Accounts without the need for OIDC provider configuration.
https://docs.aws.amazon.com/en_us/eks/latest/userguide/pod-identities.html#pod-id-benefits
### Motivation
_No response_
### Describe the solution
_No response_
### Additional context
_No response_
Contributor guide
Research direction
The issue names no implementation files or tests. Start by locating Gravitino's existing IRSA authentication path and read the linked AWS EKS Pod Identity documentation; done means supporting Pod Identity alongside IRSA with appropriate tests and documentation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, java, kubernetes
- Domain
- authentication, cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100