DEV Community

Discussion on: Sticky sessions and canary releases in Kubernetes

View post
Collapse
 
symeta profile image
symeta •

Hi, Daniel, I followed the steps the blog dev.to/danielepolencic/binding-aws...
and found out an error when executing

aws sts assume-role-with-web-identity   --role-arn $AWS_ROLE_ARN   --role-session-name test   --web-identity-token $AWS_WEB_IDENTITY_TOKEN_FILE   --duration-seconds 1000
Enter fullscreen mode Exit fullscreen mode

the error msg is as below:

An error occurred (InvalidIdentityToken) when calling the AssumeRoleWithWebIdentity operation: Couldn't retrieve verification key from your identity provider,  please reference AssumeRoleWithWebIdentity documentation for requirements
Enter fullscreen mode Exit fullscreen mode

both .well-known/openid-configuration and openid/v1/jwks could be curl ed.
could you give some guidance on how to solve the issue?
Many thanks.