Add AWS credentials chain info (#234)

This commit is contained in:
pollfly 2022-04-13 11:45:35 +03:00 committed by GitHub
parent 79cbe73bcb
commit 2404216e47
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 16 additions and 1 deletions

View File

@ -664,6 +664,15 @@ metrics, network, AWS S3 buckets and credentials, Google Cloud Storage, Azure St
* For AWS S3, the default secret access key for any bucket that is not specified in the `sdk.aws.s3.credentials` section. * For AWS S3, the default secret access key for any bucket that is not specified in the `sdk.aws.s3.credentials` section.
---
**`sdk.aws.s3.use_credentials_chain`** (*bool*)
* Instead of using default credentials for an unspecified bucket, enable credentials chain to let Boto3 pick the right
credentials. This includes picking credentials from environment variables,
a credential file, and metadata service with an IAM role configured. See [Boto3 documentation](https://boto3.amazonaws.com/v1/documentation/api/latest/guide/credentials.html#configuring-credentials)
<br/> <br/>
###### sdk.aws.s3.credentials ###### sdk.aws.s3.credentials

View File

@ -23,7 +23,12 @@ The ClearML configuration file uses [HOCON](https://github.com/lightbend/config/
### Configuring AWS S3 ### Configuring AWS S3
Modify these parts of the clearml.conf file and add the key, secret, and region of the s3 bucket. Modify these parts of the clearml.conf file and add the key, secret, and region of the s3 bucket.
It's possible to also give access to specific s3 buckets. It's possible to also give access to specific s3 buckets.
You can also enable using a credentials chain to let Boto3
pick the right credentials. This includes picking credentials from environment variables, a credential file, and metadata service
with an IAM role configured. See [Boto3 documentation](https://boto3.amazonaws.com/v1/documentation/api/latest/guide/credentials.html#configuring-credentials).
``` ```
aws { aws {
s3 { s3 {
@ -41,6 +46,7 @@ aws {
key: "" key: ""
secret: "" secret: ""
verify: "/path/to/ca/bundle.crt" OR false to not verify verify: "/path/to/ca/bundle.crt" OR false to not verify
use_credentials_chain: false
}, },
] ]