Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document using Kubernetes (EKS) service accounts for AWS credentials #563

Closed
r13i opened this issue Nov 14, 2022 · 0 comments
Closed

Document using Kubernetes (EKS) service accounts for AWS credentials #563

r13i opened this issue Nov 14, 2022 · 0 comments
Assignees
Milestone

Comments

@r13i
Copy link

r13i commented Nov 14, 2022

From the source code 1, it seems possible to acquire credentials from a service account on EKS, which sets the environment variables AWS_ROLE_ARN and AWS_WEB_IDENTITY_TOKEN_FILE.

I am basing my setup on the example How to use clickhouse-backup in Kubernetes
.

After updating my ClickHouse installation with the reference to the service account name, all the operations work fine.

apiVersion: "clickhouse.altinity.com/v1"
kind: "ClickHouseInstallation"
metadata:
  name: <NAME>
  namespace: <NAMESPACE>
spec:
  templates:
    podTemplates:
      - name: <NAME>
        spec:
          containers:
            - name: clickhouse-backup
            ...
          serviceAccountName: <SERVICE ACCOUNT NAME>

Is it possible to update the documentation to mention this option, which I think would be valuable for everyone using EKS?

@Slach Slach self-assigned this Mar 17, 2023
@Slach Slach added this to the 2.3.0 milestone Mar 17, 2023
@Slach Slach closed this as completed in 643cfc3 Jun 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants