Open jwalters-gpsw opened 7 years ago
Maybe this? https://github.com/wal-e/wal-e/pull/289
Sounds like it! Feel like writing up a fix to add AWS_INSTANCE_PROFILE=1 to the environment if both the access key and secret key are not present?
This is where we'd need to set that: https://github.com/deis/postgres/blob/c480c013038cffb87632fec67e766fb8e9bb58dd/rootfs/docker-entrypoint-initdb.d/001_setup_envdir.sh#L31-L36
should be (based on https://github.com/wal-e/wal-e/pull/289) :
# if these values are empty, then the user is using IAM credentials so we don't want these in the
# environment
if [[ "$AWS_ACCESS_KEY_ID" != "" && "$AWS_SECRET_ACCESS_KEY" != "" ]]; then
echo $AWS_ACCESS_KEY_ID > AWS_ACCESS_KEY_ID
echo $AWS_SECRET_ACCESS_KEY > AWS_SECRET_ACCESS_KEY
elif
echo "1" > AWS_INSTANCE_PROFILE
fi
This is based on the assumption you are using WAL-E build after Nov 28, 2016.
Yes. What I meant was would you mind writing up a PR with that code? If not I'll write one up.
I'll see if I can figure out how to do this officially via a pull request
I'll create a pull request.
I have IAM setup and have confirmed it works in the deis namespace by running up generic ubuntu and accessing the bucket successfully. However the database log is showing this:
My values config snippets are:
This is with chart 2.13 (assuming this is the latest).