search

juicedata / juicefs

JuiceFS is a distributed POSIX file system built on top of Redis and S3.
https://juicefs.com
Apache License 2.0
10.66k stars 930 forks source link

AWS_WEB_IDENTITY_TOKEN_FILE / IRSA support? #1916

Closed tooptoop4 closed 2 years ago

tooptoop4 commented 2 years ago

Instead of direct IAM role is IRSA supported for S3 auth? https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/

zwwhdls commented 2 years ago

Hi @tooptoop4 ,

You can set ServiceAccount in CSI Node pod, and mount pod will inherit it.

Refer to https://github.com/juicedata/juicefs-csi-driver/issues/167