From 04c72c37c710249de33b15f59d2f6537d6344acd Mon Sep 17 00:00:00 2001
From: kahirokunn <okinakahiro@gmail.com>
Date: Thu, 18 Nov 2021 15:32:55 +0900
Subject: [PATCH] Add support for AWS IRSA env variables

---
 Changelog.md                                                    | 1 +
 .../rootfs/usr/local/bin/docker-entrypoint.sh                   | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index dadbf238e..471f834c6 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -6,6 +6,7 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 ### Added
+ * If you want to save mysql backup to AWS S3, `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` were the only options, but now you can use `AWS_SESSION_TOKEN` or `AWS_ROLE_ARN` and `AWS_WEB_IDENTITY_TOKEN_FILE`
 ### Changed
  * Update rclone to `v1.57.0`
 ### Removed
diff --git a/images/mysql-operator-sidecar-5.7/rootfs/usr/local/bin/docker-entrypoint.sh b/images/mysql-operator-sidecar-5.7/rootfs/usr/local/bin/docker-entrypoint.sh
index ca4bb350d..55d098e56 100755
--- a/images/mysql-operator-sidecar-5.7/rootfs/usr/local/bin/docker-entrypoint.sh
+++ b/images/mysql-operator-sidecar-5.7/rootfs/usr/local/bin/docker-entrypoint.sh
@@ -16,7 +16,7 @@ impersonate = ${GDRIVE_IMPERSONATOR}
 
 [s3]
 type = s3
-env_auth = false
+env_auth = true
 provider = ${S3_PROVIDER:-"AWS"}
 access_key_id = ${AWS_ACCESS_KEY_ID}
 secret_access_key = ${AWS_SECRET_ACCESS_KEY:-$AWS_SECRET_KEY}