starred/s3fs-fuse

Fork 0

mirror of https://github.com/s3fs-fuse/s3fs-fuse.git synced 2026-04-25 13:26:00 +03:00

[GH-ISSUE #387] Why do you need to specify IAM role name? #204

New issue

Closed

opened 2026-03-04 01:43:13 +03:00 by kerem · 4 comments

kerem commented

2026-03-04 01:43:13 +03:00

Owner

Originally created by @wimnat on GitHub (Apr 6, 2016).
Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/387

I would like to know why you need to specify IAM role name? When would IAM role specified be different than what can be found out from http://169.254.169.254/latest/meta-data/iam/info?

To maintain backward compatibility, I propose that you should be able to specify an option that reads the IAM role from http://169.254.169.254/latest/meta-data/iam/info and then uses this to authenticate.

My reasoning for this request - I want to add an s3fs mount to my fstab before creating an AMI. The AMI may be started with different iam roles so i don't want to hard code to a particular iam role name.

Originally created by @wimnat on GitHub (Apr 6, 2016). Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/387 I would like to know why you need to specify IAM role name? When would IAM role specified be different than what can be found out from http://169.254.169.254/latest/meta-data/iam/info? To maintain backward compatibility, I propose that you should be able to specify an option that reads the IAM role from http://169.254.169.254/latest/meta-data/iam/info and then uses this to authenticate. My reasoning for this request - I want to add an s3fs mount to my fstab before creating an AMI. The AMI may be started with different iam roles so i don't want to hard code to a particular iam role name.

kerem closed this issue

2026-03-04 01:43:13 +03:00

kerem commented

2026-03-04 01:43:14 +03:00

Author

Owner

@ggtakec commented on GitHub (May 6, 2016):

@wimnat I'm sorry for my late reply.

I mered new codes which is changed about iam_role option.

New iam_role option requires the IAM role name or "auto".
If you specify "auto", s3fs will automatically use the IAM role names that are set to an instance.(loading IAM role name from http://169.254.169.254/latest/meta-data/iam/info)
If you specify this option without any argument, it is the same as that you have specified the "auto".

As a result of this change, I think it is what you want.

I closed this issue, but if you found bugs or have requests, please reopen this issue.
Thanks.

@ggtakec commented on GitHub (May 6, 2016): @wimnat I'm sorry for my late reply. I mered new codes which is changed about iam_role option. New iam_role option requires the IAM role name or "auto". If you specify "auto", s3fs will automatically use the IAM role names that are set to an instance.(loading IAM role name from http://169.254.169.254/latest/meta-data/iam/info) If you specify this option without any argument, it is the same as that you have specified the "auto". As a result of this change, I think it is what you want. I closed this issue, but if you found bugs or have requests, please reopen this issue. Thanks.

kerem commented

2026-03-04 01:43:14 +03:00

Author

Owner

@vbarba commented on GitHub (May 19, 2016):

Hi,

I think that this is not working propperly:

s3fs bucket-tomount /mnt -o iam_role
s3fs: could not determine how to establish security credentials.

but instance role is ok:

curl http://169.254.169.254/latest/meta-data/iam/info
{
"Code" : "Success",
"LastUpdated" : "2016-05-19T11:42:58Z",
"InstanceProfileArn" : "arn:aws:iam::155XXXXXX:instance-profile/XXXXX",
"InstanceProfileId" : "AIPAIJSXXXXXXV4OJS"
}

Thanks.

@vbarba commented on GitHub (May 19, 2016): Hi, I think that this is not working propperly: s3fs bucket-tomount /mnt -o iam_role s3fs: could not determine how to establish security credentials. but instance role is ok: curl http://169.254.169.254/latest/meta-data/iam/info { "Code" : "Success", "LastUpdated" : "2016-05-19T11:42:58Z", "InstanceProfileArn" : "arn:aws:iam::155XXXXXX:instance-profile/XXXXX", "InstanceProfileId" : "AIPAIJSXXXXXXV4OJS" } Thanks.

kerem commented

2026-03-04 01:43:14 +03:00

Author

Owner

@nturner commented on GitHub (May 20, 2016):

I'm seeing the same problem as @vbarba. I filed https://github.com/s3fs-fuse/s3fs-fuse/issues/419 to track this.

@nturner commented on GitHub (May 20, 2016): I'm seeing the same problem as @vbarba. I filed https://github.com/s3fs-fuse/s3fs-fuse/issues/419 to track this.

kerem commented

2026-03-04 01:43:14 +03:00

Author

Owner

@ggtakec commented on GitHub (May 29, 2016):

@vbarba I merged @nturner 's patch, please see #421 and use latest codes in master branch.
Regards,

@ggtakec commented on GitHub (May 29, 2016): @vbarba I merged @nturner 's patch, please see #421 and use latest codes in master branch. Regards,

kerem referenced this issue

2026-03-04 01:53:45 +03:00

[PR #204] [MERGED] Add integration test for xattr #1397

kerem referenced this issue

2026-03-04 01:53:45 +03:00

[PR #212] [MERGED] Updates #1399