[GH-ISSUE #1656] Oracle Cloud and Instance Principal #862

Open
opened 2026-03-04 01:49:29 +03:00 by kerem · 6 comments
Owner

Originally created by @saracm93 on GitHub (May 11, 2021).
Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1656

Additional Information

s3fs-fuse is working perfectly with Oracle Cloud using access and secret key. I'm trying to configure s3fs without credentials using instance_principal (https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm).
I tried with s3fs iam_role without luck. Is there any chance to use s3fs without credentials on Oracle Cloud? Or did I miss something?

Version of s3fs being used (s3fs --version)

V1.89

GNU/Linux Distribution, if applicable (cat /etc/os-release)

Oracle Linux Server 7.9

Originally created by @saracm93 on GitHub (May 11, 2021). Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1656 ### Additional Information s3fs-fuse is working perfectly with Oracle Cloud using access and secret key. I'm trying to configure s3fs without credentials using instance_principal (https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm). I tried with s3fs iam_role without luck. Is there any chance to use s3fs without credentials on Oracle Cloud? Or did I miss something? #### Version of s3fs being used (s3fs --version) V1.89 #### GNU/Linux Distribution, if applicable (cat /etc/os-release) Oracle Linux Server 7.9
Author
Owner

@gaul commented on GitHub (May 11, 2021):

I believe this works with AWS but does Oracle Cloud use a different mechanism?

<!-- gh-comment-id:838485110 --> @gaul commented on GitHub (May 11, 2021): I believe this works with AWS but does Oracle Cloud use a different mechanism?
Author
Owner

@gaul commented on GitHub (Jan 23, 2022):

@achartre could you redirect this to someone at Oracle?

<!-- gh-comment-id:1019595539 --> @gaul commented on GitHub (Jan 23, 2022): @achartre could you redirect this to someone at Oracle?
Author
Owner

@achartre commented on GitHub (Jan 24, 2022):

With Oracle Cloud Instance Principal, security credentials are available at http://169.254.169.254/opc/v2 which I think is specific to Oracle Cloud. Also I am not sure you can use these credentials with the S3 compatible API because the S3 compatible API uses a customer secret key. I am checking this.

<!-- gh-comment-id:1019891165 --> @achartre commented on GitHub (Jan 24, 2022): With Oracle Cloud Instance Principal, security credentials are available at http://169.254.169.254/opc/v2 which I think is specific to Oracle Cloud. Also I am not sure you can use these credentials with the S3 compatible API because the S3 compatible API uses a customer secret key. I am checking this.
Author
Owner

@achartre commented on GitHub (Feb 3, 2022):

After checking, Oracle Cloud Instance Principal cannot be used with the S3 compatible API. We are investigating how to provide a filesystem that would use the native Oracle Cloud Object Storage API, and this way it would be able to support instance principal.

<!-- gh-comment-id:1029156311 --> @achartre commented on GitHub (Feb 3, 2022): After checking, Oracle Cloud Instance Principal cannot be used with the S3 compatible API. We are investigating how to provide a filesystem that would use the native Oracle Cloud Object Storage API, and this way it would be able to support instance principal.
Author
Owner

@SachitNayak commented on GitHub (Mar 22, 2022):

Hi team,

I have the same issue, s3fs-fuse works perfectly with Oracle cloud customer secret keys, but I want it to work with Oracle cloud instance principals... please make this as a feature request...

<!-- gh-comment-id:1074697919 --> @SachitNayak commented on GitHub (Mar 22, 2022): Hi team, I have the same issue, s3fs-fuse works perfectly with Oracle cloud customer secret keys, but I want it to work with Oracle cloud instance principals... please make this as a feature request...
Author
Owner

@achartre commented on GitHub (Oct 25, 2022):

Note that rclone v1.60 was released with Oracle Object Storage backend support ; it includes support for instance principal authentication and mounting an Oracle Object Storage bucket as a filesystem (with rclone mount).

<!-- gh-comment-id:1290531061 --> @achartre commented on GitHub (Oct 25, 2022): Note that rclone v1.60 was released with Oracle Object Storage backend support ; it includes support for instance principal authentication and mounting an Oracle Object Storage bucket as a filesystem (with rclone mount). - rclone v1.60 changelog : https://rclone.org/changelog/#v1-60-0-2022-10-21 - rclone Oracle Object Storage : https://rclone.org/oracleobjectstorage/
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/s3fs-fuse#862
No description provided.