Skip to content

S3 backend authentication with EKS IAM Roles for Service Accounts #1

Description

@JulianoJuSilva

Dear, we are deploying Gerrit on EKS with its Gerrit Operator. We would need LFS with S3 as its backend, and I haven't found a solution to use short-term credentials to authenticate to S3 via the plugin settings.

Can we have something like this s3.role, and that role would be attached to the EKS's Service Account?

I tried, for example, to set empty strings for both accessKey and secretKey, but it fails to load the plugin as per the implementation: https://github.com/GerritCodeReview/plugins_lfs/blob/master/src/main/java/com/googlesource/gerrit/plugins/lfs/s3/S3LargeFileRepository.java#L49

I'd appreciate any suggestions.

Thanks!

Best regards,
Juliano.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions