Skip to content

Conversation

@mozillazg
Copy link

@mozillazg mozillazg commented Jul 26, 2025

  • I added CHANGELOG entry for this change.
  • Change is not relevant to the end user.

Changes

Introduces the sdk_auth: true configuration option.

When enabled, the application will use the Alibaba Cloud SDK's default credential provider to obtain credentials. This allows for keyless authentication methods such as RRSA (for Kubernetes) and IMDS (for ECS instances), improving security by avoiding hardcoded keys.

Closes #151

Verification

Introduces the `sdk_auth: true` configuration option.

When enabled, the application will use the Alibaba Cloud SDK's default credential provider to obtain credentials.
This allows for keyless authentication methods such as RRSA (for Kubernetes) and IMDS (for ECS instances),
improving security by avoiding hardcoded keys.

Signed-off-by: mozillazg <[email protected]>
Signed-off-by: mozillazg <[email protected]>
Signed-off-by: mozillazg <[email protected]>
@sousa-miguel
Copy link

Hey @mozillazg, what is missing on this PR? Maybe I can assist here.
We are starting to migrate stuff from aws-cn to alicloud and this feature would be handy :)

@mozillazg
Copy link
Author

Hey @mozillazg, what is missing on this PR? Maybe I can assist here.

We are starting to migrate stuff from aws-cn to alicloud and this feature would be handy :)

@sousa-miguel I do not have time to test it yet. do you have any time to help me with testing? thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Thanos OSS(Aliyun) provider does not support IAM(RAM) role

2 participants