from the last couple of days, I have been trying to figure a way to read the Secrets from AWS secret manager from my private EKS cluster with FARGATE.

For doing so I have attempted to use an open-source tool https://github.com/external-secrets/external-secrets but I couldn't make it work with the private cluster.

I can read the passwords in my local by running the source-code of the above-link when I am connected to internet. But when I deploy the pod to AWS private cluster it always gives an timeout error as shown in the below code snippets.

vel":"error","ts":1637220916.9525745,"logger":"controllers.ExternalSecret","msg":"could not reconcile ExternalSecret. Please check!!!","ExternalSecret":"commons/example","SecretStore":"commons/secretstore-sample","error":"could not get secret data from provider: key \"myTestSecret/random\" from ExternalSecret \"example\": WebIdentityErr: failed to retrieve credentials\ncaused by: RequestError: send request failed\ncaused by: Post \"https://sts.amazonaws.com/\": dial tcp 209.54.180.124:443: i/o timeout","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/cloudberry/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.3/pkg/internal/controller/controller.go:298\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/cloudberry/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.3/pkg/internal/controller/controller.go:253\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/cloudberry/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.3/pkg/internal/controller/controller.go:214"}

I have been struggling to make it work, I have also attempted to change the source-code by changing the URLs in the code as I found it hard-coded at one place but still the error doesn't go away.

Any hints of how to make external-secrets work in a private cluster will be very much helpful.

Thanks in advance.