You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
BTW, thanks for oc - trying it out for a big UI project mashing new/old UI coming from different projects/groups with version matrix. OC seems to be a great fit.
So to fix the s3 key/secret validation error during registry startup, I just had to remove the validation code by changing line 66 of oc/src/registry/domain/validators/registry-configuration.js
from:
After the change, the oc-registry on EC2 comes up fine with just bucket name, region.
(The Javascript AWS SDK will pull the Key/Secret from EC2 instance using http://169.254.169.254/latest/metadata/iam/security-credentials/role-name - these key/secret are automatically rotated and SDK will refresh it - more secure than having to handle s3 credentials ourselves)
Hi Matteo, I have pushed the PR. Ran tests successfully.
Look forward to contributing more as and when need arises to enhance OC for our use case which could benefit others.
IAM role based access to s3 from EC2 (instead of storing s3 key/secret)
http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html
BTW, thanks for oc - trying it out for a big UI project mashing new/old UI coming from different projects/groups with version matrix. OC seems to be a great fit.
So to fix the s3 key/secret validation error during registry startup, I just had to remove the validation code by changing line 66 of oc/src/registry/domain/validators/registry-configuration.js
from:
to:
After the change, the oc-registry on EC2 comes up fine with just bucket name, region.
(The Javascript AWS SDK will pull the Key/Secret from EC2 instance using http://169.254.169.254/latest/metadata/iam/security-credentials/role-name - these key/secret are automatically rotated and SDK will refresh it - more secure than having to handle s3 credentials ourselves)
s3: {
bucket: '<BUCKET_NAME>',
region: 'us-east-1',
componentsDir: 'components'
},
Still new to the OC code and not very familiar yet. But if this above code change seems fine, let me know if you like me to post a PR. Thanks.
The text was updated successfully, but these errors were encountered: