The credential update process is divided into two steps: Since temporary credentials expire quickly, the key is how to update the temporary credentials that JuiceFS uses after format the file system before the temporary credentials expire. When formatting the file system, pass the Access Key, Secret Key, and token of the temporary credentials through -access-key, -secret-key, -session-token can set the value. The way of using temporary credentials is not much different from using permanent credentials. How to set up object storage with temporary access credentials For example, Amazon S3 can refer to this link to obtain temporary credentials, and Alibaba Cloud OSS can refer to this link.
This process can generally be simplified by the SDK provided by the cloud vendor. Generally, the Access Key, Secret Key and ARN representing the permission boundary of the temporary access credential are required as parameters to request access to the STS server of the cloud service vendor to obtain the temporary access credential. How to get temporary credentials ĭifferent cloud vendors have different acquisition methods.
Permanent access credentials generally have two parts, Access Key, Secret Key, while temporary access credentials generally include three parts, Access Key, Secret Key and token, and temporary access credentials have an expiration time, usually between a few minutes and a few hours. If the cloud server instance already has read and write access to the object storage, there is no need to specify -access-key and -secret-key. Public clouds typically allow users to create IAM (Identity and Access Management) roles, such as AWS IAM role or Alibaba Cloud RAM role, which can be assigned to VM instances.
0 kommentar(er)
