Skip to content
This repository was archived by the owner on Jun 19, 2025. It is now read-only.

Make endpoint config optional in AWS secrets-manager keystore config - #496

Open
derSascha wants to merge 1 commit into
minio:masterfrom
derSascha:aws-secrets-manager-make-endpoint-optional
Open

Make endpoint config optional in AWS secrets-manager keystore config#496
derSascha wants to merge 1 commit into
minio:masterfrom
derSascha:aws-secrets-manager-make-endpoint-optional

Conversation

@derSascha

Copy link
Copy Markdown
Contributor

The AWS SDK contains a set of pre-configured endpoints. Make the endpoint config optional, and let the SDK decide what endpoint should be used. This fixes #495. See #495 about more details.

Maybe we should make the region optional too. Both can be autoconfigured by the SDK.

@derSascha

Copy link
Copy Markdown
Contributor Author

Tested with IRSA on EKS with a config like this:

  keystore:
    aws:
      secretsmanager:
        region: us-east-1
        kmskey: arn:aws:kms:us-east-1:...

@derSascha
derSascha force-pushed the aws-secrets-manager-make-endpoint-optional branch 2 times, most recently from 3be2fd3 to b44a799 Compare January 31, 2025 09:39
@derSascha

Copy link
Copy Markdown
Contributor Author

@aead @shtripat any chance to look into this? Changes in this pull-request are comparable small

The AWS SDK contains a set of pre-configured endpoints. Make the endpoint config optional,
and let the SDK decide what endpoint should be used.
@derSascha
derSascha force-pushed the aws-secrets-manager-make-endpoint-optional branch from b44a799 to aa65aed Compare April 23, 2025 10:37
@derSascha

Copy link
Copy Markdown
Contributor Author

Rebased on the current master. @aead @shtripat any chance to merge this? It's only a minimalistic change in the config parser/validator

@shtripat
shtripat requested a review from aead April 23, 2025 12:03
@harshavardhana
harshavardhana force-pushed the master branch 3 times, most recently from f832434 to 63649d0 Compare May 27, 2025 18:49
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Required AWS endpoint configuration does not work with STS/IRSA

1 participant