Autodiscover Credentials with Workload Identity Broken Since v0.10.0

[dave-pollock]

I'm running Kafka Connect in GKE and using Workload Identity to provision a GCP service account into the container. This is working perfectly on v0.9.1.

Attempting to upgrade to v0.10.0 with the exact same config I get the following error:

Caused by: com.google.api.client.http.HttpResponseException: 401 Unauthorized

I've also tried v0.11.0 and v0.13.0. I then downgraded back to v0.9.1 and everything is fine.

Could perhaps be related to this change?
Aiven-Open/gcs-connector-for-apache-kafka@ff3a51d#diff-6c787db8b668bb3e6986238c0a507af75dbbefae041b407ba029b4e3f1f33e43R329-R335

[martinzuern]

I believe this was fixed with Aiven-Open/gcs-connector-for-apache-kafka#292 however not yet released. @jeqo @ivanyu is there any way to build a new release soon?

[martinzuern]

Ping @jjaakola-aiven @ivanyu @tvainika

[shlomitubul]

still happened with 3.1.0