Pod-level identity improvements

awslabs / mountpoint-s3-csi-driver

Built on Mountpoint for Amazon S3, the Mountpoint CSI driver presents an Amazon S3 bucket as a storage volume accessible by containers in your Kubernetes cluster.

Apache License 2.0

213 stars 26 forks source link

Pod-level identity improvements #237

Closed unexge closed 3 months ago

unexge commented 3 months ago

This PR adds the following improvements:

Ensure we don't log sensitive information from csi.NodePublishVolumeRequest
Disable caching with pod-level credentials
Ensure to disable all other credential providers except STS provider
Add a test case to make sure we're not using secrets if pod-level identity is enabled

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.