From 1e30ab211633f37140c8805a60a7a336d713a941 Mon Sep 17 00:00:00 2001 From: Akhil Bhardawaj Date: Tue, 20 Oct 2026 10:56:26 -0700 Subject: [PATCH] Set ForceAttemptHTTP2 on the EKS Auth HTTP transport The EKS Auth client uses a custom http.Transport with a custom DialContext. Go does not attempt HTTP/2 on a transport with a custom DialContext unless ForceAttemptHTTP2 is set. The AWS SDK default transport sets ForceAttemptHTTP2 to true, so this restores that behavior. Signed-off-by: Akhil Bhardawaj --- internal/cloud/eksauth/service.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/internal/cloud/eksauth/service.go b/internal/cloud/eksauth/service.go index aca3e8d..71b9e1f 100644 --- a/internal/cloud/eksauth/service.go +++ b/internal/cloud/eksauth/service.go @@ -37,7 +37,8 @@ func NewService(ctx context.Context, cfg aws.Config, enableIMDS bool) Iface { // Configure HTTP client with custom timeouts httpClient := &http.Client{ Transport: &http.Transport{ - Proxy: http.ProxyFromEnvironment, + Proxy: http.ProxyFromEnvironment, + ForceAttemptHTTP2: true, DialContext: (&net.Dialer{ Timeout: 500 * time.Millisecond, // Socket timeout }).DialContext,