SkyPilot: Run AI and batch jobs on any infra (Kubernetes or 12+ clouds). Get unified execution, cost savings, and high GPU availability via a simple interface.
User reported they are using an external mechanism to inject AWS credentials in their k8s pods, which should be used for accessing buckets. However, we upload AWS credentials from the local machine if they exist, and as a result these local user credentials were overriding the injected credentials.
This PR adds a NO_UPLOAD flag to remote_identity, to explicitly skip uploading cloud credentials even if they exist on the local machine.
[x] Tested on a SkyPilot cluster launched on k8s, with aws.remote_identity: NO_UPLOAD and verified AWS credentials are not uploaded.
User reported they are using an external mechanism to inject AWS credentials in their k8s pods, which should be used for accessing buckets. However, we upload AWS credentials from the local machine if they exist, and as a result these local user credentials were overriding the injected credentials.
This PR adds a
NO_UPLOADflag toremote_identity, to explicitly skip uploading cloud credentials even if they exist on the local machine.aws.remote_identity: NO_UPLOADand verified AWS credentials are not uploaded.