My project was using objstore to connect to CEPH (s3 compatible) and now we are moving to VAST (also s3 compatible).
Our Vast setup is done in a way that we want client to not do any request singing. And our proxy will figure out authentication automatically based on client cluster.
Currently I can't just set AccessKey to empty string. The code in s3.NewBucketWithConfig() will automatically create chain of credential provider comprise of EnvAWS, FileAWSCredentials and IAM. The last one is causing response time issue for us since it try to make request to external endpoint.
I am wondering if we should have a way to specify in config to say UseAnonymousCredential to not do request signing at all?
Related code : https://github.com/thanos-io/objstore/blob/main/providers/s3/s3.go#L235
My project was using objstore to connect to CEPH (s3 compatible) and now we are moving to VAST (also s3 compatible).
Our Vast setup is done in a way that we want client to not do any request singing. And our proxy will figure out authentication automatically based on client cluster.
Currently I can't just set AccessKey to empty string. The code in
s3.NewBucketWithConfig()will automatically create chain of credential provider comprise of EnvAWS, FileAWSCredentials and IAM. The last one is causing response time issue for us since it try to make request to external endpoint.I am wondering if we should have a way to specify in config to say UseAnonymousCredential to not do request signing at all?
Related code : https://github.com/thanos-io/objstore/blob/main/providers/s3/s3.go#L235