apache / apache/gravitino

[FEATURE] EKS Pod Identity support

Open
#10,014 5 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
Java
Stars
3.2k
Forks
935
Avg merge
1d 16h
Merged PRs (30d)
298

Description

### Describe the feature

Currently, Apache Gravitino only supports IAM Roles for Service Accounts (IRSA) for AWS authentication within EKS clusters.

I would like to propose adding support for EKS Pod Identity. This modern authentication method simplifies credential management by allowing IAM roles to be mapped directly to Kubernetes Service Accounts without the need for OIDC provider configuration.

https://docs.aws.amazon.com/en_us/eks/latest/userguide/pod-identities.html#pod-id-benefits

### Motivation

_No response_

### Describe the solution

_No response_

### Additional context

_No response_

Contributor guide

Open the contributing guide

Research direction

The issue names no implementation files or tests. Start by locating Gravitino's existing IRSA authentication path and read the linked AWS EKS Pod Identity documentation; done means supporting Pod Identity alongside IRSA with appropriate tests and documentation.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, java, kubernetes
Domain
authentication, cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.