Skip to content

Conversation

LennartKoot
Copy link
Contributor

@LennartKoot LennartKoot commented Sep 8, 2025

Proposed changes

Fixes #410

Preserves the AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE environment variable for worker threads so the gateway can properly use the associated pod identity instead of using the node's identity.

On our cluster we restricted using the node's identity, so this resulted in an error when retrieving the AWS credentials:

2025/09/08 13:13:12 [info] 78#78: *2 js: Cached credentials are expired or not present, requesting new ones
2025/09/08 13:14:12 [info] 78#78: *2 js: Could not load EC2 task role credentials: {}

With this environment variable preserved, the 'Could not load' error is not happening anymore.

Checklist

Before creating a pull request (PR), run through this checklist and mark each as complete:

@LennartKoot LennartKoot requested a review from a team as a code owner September 8, 2025 14:20
Copy link

github-actions bot commented Sep 8, 2025

✅ All required contributors have signed the F5 CLA for this PR. Thank you!
Posted by the CLA Assistant Lite bot.

@LennartKoot
Copy link
Contributor Author

I have hereby read the F5 CLA and agree to its terms

Copy link
Collaborator

@dekobon dekobon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Thank you for your contribution.

@dekobon dekobon merged commit a9847e5 into nginx:main Sep 8, 2025
16 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Pod uses the host identity and credentials instead of the EKS Pod Identity credentials
2 participants