feat(cubestore): Support IAM role authentication for S3 #8589
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I need IAM role authentication, similar to this issue #6795.
Check List
Issue Reference this PR resolves
Add IAM role authentication.
Description of Changes Made (if issue reference is not provided)
Introduce
CUBESTORE_AWS_IAM_ROLE
andCUBESTORE_AWS_IAM_REFRESH_EVERY_MINS
.If there is
CUBESTORE_AWS_IAM_ROLE
in the env, we would generate ID and secret on the flight.Since this ID is short-lived (15 mins by default), we would need a shorten refresh loop.