[Feature Request] [Archival] [s3 provider] use IAM role + serviceAccount

temporalio / helm-charts

Temporal Helm charts

MIT License

316 stars 344 forks source link

[Feature Request] [Archival] [s3 provider] use IAM role + serviceAccount #464

Open luismacosta opened 9 months ago

luismacosta commented 9 months ago

Is your feature request related to a problem? Please describe.

[Archival] [s3 provider] use IAM role + serviceAccount

Describe the solution you'd like

use IAM role + IAM policy
create serviceAccount with annotation eks.amazonaws.com/role-arn

Additional context

I've tried to configure this, but got an error regarding s3 access From what I could find in the community, at the moment it is only possible to use IAM user (env vars AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY)

disconnex commented 2 months ago

I would love to see this feature as well, since it makes sense in an EKS environment to use service accounts and IAM roles over creating users and access keys.