Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-27202

S3DirectBatchHandler cannot start if no roleArn is defined

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 10.10
    • Fix Version/s: 11.x
    • Component/s: S3

      Description

      S3DirectBatchHandler cannot be used solely with a AWS ID and secret. Is use of use IAM instance roles optional? If it is optional, the batch handler needs to be able to start without a roleArn definition. See attached server.log with entry

      2019-04-10T12:30:38,968 ERROR [ComponentManager] Component service:org.nuxeo.ecm.automation.server.BatchManager notification of application started failed: Missing configuration property: roleArn
      org.nuxeo.ecm.core.api.NuxeoException: Missing configuration property: roleArn

      See also attached showconf.txt with nuxeo.s3storage.* properties.

      Prior to 10.10 this class could get temp credentials rather than assumeRole https://github.com/nuxeo/nuxeo/blob/9.10/addons/nuxeo-core-binarymanager-cloud/nuxeo-core-binarymanager-s3/src/main/java/org/nuxeo/ecm/core/storage/sql/S3DirectBatchHandler.java#L193

      If IAM instance roles are optional, it should be possible to either get temp creds or assume role.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              hbrown Harlan Brown
              Participants:
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: