Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow STS credentials instead of username/password #551

Open
jamie-pate opened this issue Dec 4, 2023 · 1 comment
Open

Allow STS credentials instead of username/password #551

jamie-pate opened this issue Dec 4, 2023 · 1 comment

Comments

@jamie-pate
Copy link

Description

When working with terraform it's best practice to generate temporary credentials instead of username/password or other long term credentials.

This is possible with the minio AssumeRoleWithWebIdentity api using this example but it doesn't seem like this provider supports the username+secret+token authentication parameters that would make it work.

Steps to Reproduce

  1. Set up the example to obtain AccessKeyId,SecretAccessKey,SessionToken from the AssumeRoleWithWebIdentity api.
  2. Obtain these credentials
  3. Try to put them into the provider as $MINIO_USERNAME and $MINIO_PASSWORD but there's no way to do that.

Expected behavior: [What you expect to happen]
Ideally there would be a third $MINIO_SESSION_TOKEN parameter. (minio_session_token in the provider config) that would allow these credentials to work using STS

Actual behavior: [What actually happens]
There doesn't appear to be a way to enter the session token

Reproduces how often: [What percentage of the time does it reproduce?]
100%

Versions

Terraform v1.6.5
on linux_amd64

  • provider registry.terraform.io/aminueza/minio v2.0.1
@jamie-pate
Copy link
Author

Looking at the source code this may just be an undocumented feature: https://github.com/aminueza/terraform-provider-minio/blob/main/minio/provider.go#L72

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant