fix(aws): AWS MSK IAM authentication failures on low traffic and Missing TLS support

kalavt · kalavt · commit 862a4ece7da4 · 2025-11-28T08:41:03.000+08:00
Signed-off-by: Arbin &lt;arbin.cheng@coins.ph&gt;
diff --git a/src/aws/flb_aws_credentials_ec2.c b/src/aws/flb_aws_credentials_ec2.c
@@ -132,9 +132,6 @@ int refresh_fn_ec2(struct flb_aws_provider *provider) {
     flb_debug("[aws_credentials] Refresh called on the EC2 IMDS provider");
     
     if (try_lock_provider(provider)) {
-        /* Set to 1 (epoch start) to trigger immediate refresh via time check */
-        implementation->next_refresh = 1;
-        
         ret = get_creds_ec2(implementation);
         unlock_provider(provider);
     }
diff --git a/src/aws/flb_aws_credentials_http.c b/src/aws/flb_aws_credentials_http.c
@@ -158,9 +158,6 @@ int refresh_fn_http(struct flb_aws_provider *provider) {
     flb_debug("[aws_credentials] Refresh called on the http provider");
 
     if (try_lock_provider(provider)) {
-        /* Set to 1 (epoch start) to trigger immediate refresh via time check */
-        implementation->next_refresh = 1;
-        
         ret = http_credentials_request(implementation);
         unlock_provider(provider);
     }
diff --git a/src/aws/flb_aws_credentials_sts.c b/src/aws/flb_aws_credentials_sts.c
@@ -177,9 +177,6 @@ int refresh_fn_sts(struct flb_aws_provider *provider) {
     flb_debug("[aws_credentials] Refresh called on the STS provider");
     
     if (try_lock_provider(provider)) {
-        /* Set to 1 (epoch start) to trigger immediate refresh via time check */
-        implementation->next_refresh = 1;
-        
         ret = sts_assume_role_request(implementation->sts_client,
                                       &implementation->creds, implementation->uri,
                                       &implementation->next_refresh);
@@ -485,9 +482,6 @@ int refresh_fn_eks(struct flb_aws_provider *provider) {
     flb_debug("[aws_credentials] Refresh called on the EKS provider");
     
     if (try_lock_provider(provider)) {
-        /* Set to 1 (epoch start) to trigger immediate refresh via time check */
-        implementation->next_refresh = 1;
-        
         ret = assume_with_web_identity(implementation);
         unlock_provider(provider);
     }
diff --git a/src/aws/flb_aws_msk_iam.c b/src/aws/flb_aws_msk_iam.c

Original file line number	Diff line number	Diff line change
`@@ -132,9 +132,6 @@ int refresh_fn_ec2(struct flb_aws_provider *provider) {`
`132`	`132`	`flb_debug("[aws_credentials] Refresh called on the EC2 IMDS provider");`
`133`	`133`
`134`	`134`	`if (try_lock_provider(provider)) {`
`135`		`- /* Set to 1 (epoch start) to trigger immediate refresh via time check */`
`136`		`- implementation->next_refresh = 1;`
`137`		`-`
`138`	`135`	`ret = get_creds_ec2(implementation);`
`139`	`136`	`unlock_provider(provider);`
`140`	`137`	`}`
Original file line number	Diff line number	Diff line change
`@@ -158,9 +158,6 @@ int refresh_fn_http(struct flb_aws_provider *provider) {`
`158`	`158`	`flb_debug("[aws_credentials] Refresh called on the http provider");`
`159`	`159`
`160`	`160`	`if (try_lock_provider(provider)) {`
`161`		`- /* Set to 1 (epoch start) to trigger immediate refresh via time check */`
`162`		`- implementation->next_refresh = 1;`
`163`		`-`
`164`	`161`	`ret = http_credentials_request(implementation);`
`165`	`162`	`unlock_provider(provider);`
`166`	`163`	`}`