[feature]: [Self-Hosted] Provide an option to authenticate to S3 with IRSA instead of AWS Access Key and Secret Access Key
Open
@vihar is already working on this.
Since Oct 10, 2024.
✨feature
- Dominant language
- TypeScript
- Stars
- 59.6k
- Forks
- 5.8k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 49
Description
Is there an existing issue for this?
- I have searched the existing issues
Summary
Currently authentication from Plane apiserver to AWS S3 is via Access Key and Secret Access Key. This makes credential rotation difficult. For AWS EKS (managed k8s) deployments add the option to authenticate to the S3 API using IAM roles for service accounts instead. See: https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html
Why should this be worked on?
Because it increases the security of Plane and will enable use of Plane by larger enterprises with stricter security requirements.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.