Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: support backup.barmanObjectStore.s3Credentials.inheritFromIAMRole #488

Merged

Conversation

jessebot
Copy link
Contributor

@jessebot jessebot commented Jan 6, 2025

Fixes #487 and adds the following parameters to values.yaml:

backups:
  s3:
    inheritFromIAMRole: false

recovery:
  s3:
    inheritFromIAMRole: false

Please let me know if you need anything else from me!

@jessebot jessebot requested a review from itay-grudev as a code owner January 6, 2025 16:33
@itay-grudev
Copy link
Collaborator

Is this required? Have you specified a correct serviceAccountTemplate?

@jessebot
Copy link
Contributor Author

jessebot commented Jan 6, 2025

Yes, I tried with just the serviceAccountTemplate parameter set so it has the correct annotation, but if you don't have backup.barmanObjectStore.s3Credentials.inheritFromIAMRole, it still tries to use the s3 credentials unfortunately.

serviceAccountTemplate does actually template properly though, so that's good 👍

@itay-grudev
Copy link
Collaborator

You are correct!

@itay-grudev
Copy link
Collaborator

The same option exist for Azure called inheritFromAzureAD which I seem to haved added to values, but not in _barman_object_store.tpl. Could you add it too as part of this PR?

@jessebot
Copy link
Contributor Author

jessebot commented Jan 7, 2025

It looks like it's already there:

Am I misunderstanding something? Is there more you'd like done? Happy to help, just a bit confused 🙏

@itay-grudev
Copy link
Collaborator

@jessebot I'm sorry about the confusion. For some reason I couldn't find it when running a full text search, but you're correct.

I'll try to release it next week along with several other things. Is that ok?

@itay-grudev itay-grudev merged commit dc3137e into cloudnative-pg:main Jan 7, 2025
5 checks passed
@jessebot
Copy link
Contributor Author

jessebot commented Jan 7, 2025

That works fine for me. Thanks for getting back to me quickly and moving this forward! 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

No way to set s3Credentials to inheritFromIAMRole via cluster chart
2 participants