mirror of
https://github.com/s3fs-fuse/s3fs-fuse.git
synced 2024-11-20 03:05:12 +00:00
584ea488bf
When using an instance with an IAM Role, transient credentials can be found in http://169.254.169.254/latest/meta-data/ at iam/security-credentials/role-name and s3fs tries to do this. However, it is using the profile-name where role-name is needed. In many cases the role and profile name are the same, but they are not always. The simplest way to find the role name appears to be to GET http://169.254.169.254/latest/meta-data/iam/security-credentials/ itself, which returns a listing of the role names for which temporary credentials exist. (I think there will probably only be one, but we probably want to split on newlines and take the first one here in case that assumption is not valid). This is the approach the AWS SDK appears to use (based on WireShark analysis). Bug: https://github.com/s3fs-fuse/s3fs-fuse/issues/421 Signed-off-by: Nathaniel W. Turner <nate@houseofnate.net> |
||
---|---|---|
.. | ||
addhead.cpp | ||
addhead.h | ||
cache.cpp | ||
cache.h | ||
common_auth.cpp | ||
common.h | ||
curl.cpp | ||
curl.h | ||
fdcache.cpp | ||
fdcache.h | ||
gnutls_auth.cpp | ||
Makefile.am | ||
nss_auth.cpp | ||
openssl_auth.cpp | ||
s3fs_auth.h | ||
s3fs_util.cpp | ||
s3fs_util.h | ||
s3fs.cpp | ||
s3fs.h | ||
string_util.cpp | ||
string_util.h | ||
test_string_util.cpp | ||
test_util.h |