Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

lightning: support lightning use IAM (#1975) #1987

Merged
merged 5 commits into from
Mar 20, 2020

Conversation

sre-bot
Copy link
Contributor

@sre-bot sre-bot commented Mar 19, 2020

cherry-pick #1975 to release-1.1


What problem does this PR solve?

add serviceAccount for config

What is changed and how does it work?

add service Account config to pod template

Check List

Tests

  • Manual test (add detailed scripts or steps below)
  1. install an importer in tidb cluster

  2. add annotation in annotation field

annotations: {"iam.amazonaws.com/role": "arn:aws:iam::123456789012:role/user"}

and set a seviceAccount in values.yaml

  1. follow doc to deploy lightning in tidb cluster and use remote S3 backups to restore , ignore accesskey and
    secret key in field dataSource.remote.secretName

  2. check wether initContainer can download file from S3 and the serviceAccount is attach to the tidb-lightning pod

Code changes

  • Has Go code change

@cofyc cofyc merged commit b4f64ab into pingcap:release-1.1 Mar 20, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants