[GH-ISSUE #590] Make access_id and secret_key optional for IRSA S3 access support #213

New issue

Closed

opened 2026-02-25 22:34:37 +03:00 by kerem · 2 comments

kerem commented

2026-02-25 22:34:37 +03:00

Owner

Originally created by @yo-l1982 on GitHub (Oct 16, 2025).
Original GitHub issue: https://github.com/flyimg/flyimg/issues/590

Originally assigned to: @sadok-f on GitHub.

Is your feature request related to a problem? Please describe.
In EKS we use IRSA to access buckets.
It is a no key/secret access method were the container uses a ServiceAccount connected to a IAM role that will inject what is needed for the AWS SDK to access the bucket.

Describe the solution you'd like
Make access_id and secret_key optional as they are now enforced by validation.
When these two parameters are set and passed into the AWS SDK client the key/secret access method will take precedence over IRSA. Any dummy key/secret will return a 403 from AWS API.

I have tried this with a custom build of flyimg and it works, I can deliver a PR, it is a really simple fix.

As seen below flyimg is already using supported AWS SDK versions
https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-minimum-sdk.html

Additional context
I believe this also will add support for "Pod identities" in EKS
https://docs.aws.amazon.com/eks/latest/userguide/pod-id-minimum-sdk.html

It will probably also add support for similar solutions in Azure and GCP but I am in no possition to test this.

Originally created by @yo-l1982 on GitHub (Oct 16, 2025). Original GitHub issue: https://github.com/flyimg/flyimg/issues/590 Originally assigned to: @sadok-f on GitHub. **Is your feature request related to a problem? Please describe.** In EKS we use [IRSA](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-minimum-sdk.html) to access buckets. It is a no key/secret access method were the container uses a ServiceAccount connected to a IAM role that will inject what is needed for the AWS SDK to access the bucket. **Describe the solution you'd like** Make access_id and secret_key optional as they are now enforced by validation. When these two parameters are set and passed into the AWS SDK client the key/secret access method will take precedence over IRSA. Any dummy key/secret will return a 403 from AWS API. I have tried this with a custom build of flyimg and it works, I can deliver a PR, it is a really simple fix. As seen below flyimg is already using supported AWS SDK versions https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-minimum-sdk.html **Additional context** I believe this also will add support for "Pod identities" in EKS https://docs.aws.amazon.com/eks/latest/userguide/pod-id-minimum-sdk.html It will probably also add support for similar solutions in Azure and GCP but I am in no possition to test this.

kerem

2026-02-25 22:34:37 +03:00

closed this issue
added the
enhancement
label

kerem commented

2026-02-25 22:34:38 +03:00

Author

Owner

@sadok-f commented on GitHub (Oct 17, 2025):

Hi @yo-l1982
thank you for opening this issue.
yes I understand what you mean here.
we'll work to update the functionality asap.
Thank you again!

@sadok-f commented on GitHub (Oct 17, 2025): Hi @yo-l1982 thank you for opening this issue. yes I understand what you mean here. we'll work to update the functionality asap. Thank you again!

kerem commented

2026-02-25 22:34:38 +03:00

Author

Owner

@sadok-f commented on GitHub (Oct 19, 2025):

@yo-l1982 we’ve just released version 1.9.1, which includes updates to support the IRSA feature.

Thank you!

@sadok-f commented on GitHub (Oct 19, 2025): @yo-l1982 we’ve just released version 1.9.1, which includes updates to support the IRSA feature. Thank you!

kerem referenced this issue

2026-02-25 22:35:08 +03:00

[PR #214] [MERGED] Fix composer install warning, closes #213 #334

kerem referenced this issue

2026-03-15 15:07:04 +03:00

[GH-ISSUE #213] Fix composer install warning #704

kerem referenced this issue

2026-03-15 15:44:10 +03:00

[PR #214] [MERGED] Fix composer install warning, closes #213 #943