Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Binary Backups - AWS temporary credentials don't work #4855

Closed
spstarr opened this issue Feb 26, 2020 · 2 comments · Fixed by #4858
Closed

Binary Backups - AWS temporary credentials don't work #4855

spstarr opened this issue Feb 26, 2020 · 2 comments · Fixed by #4858
Labels
area/enterprise/backup Related to binary backups priority/P1 Serious issue that requires eventual attention (can wait a bit) status/accepted We accept to investigate/work on it.

Comments

@spstarr
Copy link

spstarr commented Feb 26, 2020

What version of Dgraph are you using?

1.2.0

Have you tried reproducing the issue with the latest release?

Only 1.2.0

What is the hardware spec (RAM, OS)?

EC2 instance

Steps to reproduce the issue (command/config used to run Dgraph).

Running dgraph with docker-compose

  1. Do not set any AWS_* envvars inside the docker envs for the zero or alpha
  2. perform a curl curl -XPOST localhost:8080/admin/backup -d "destination=s3:///<bucketname>" but also pass as parameters the AWS temporary credentials for The access_key, secret_key, and session_token.

Expected behaviour and actual result.

The backup should be successfully completed, actual result the backup fails with permission failure.

Not clear to me is:

  1. If you do not have static AWS credentials how does this work?
  2. Do you have to have AWS* envvars set in order to override any of those values in first place?
  3. Can you use temporary AWS credentials?
@sleto-it sleto-it added the area/enterprise/backup Related to binary backups label Feb 26, 2020
@spstarr
Copy link
Author

spstarr commented Feb 26, 2020

I should point out if i do pass static AWS credentials to the docker env then restart docker-compose fully, the backup works with the basic curl command above w/o credential override.

@martinmr martinmr added the status/accepted We accept to investigate/work on it. label Feb 26, 2020
@martinmr
Copy link
Contributor

Looking into it. I think I know what the issue is. The logic to set the proper host when the host is not in the path is not executed when you use custom credentials.

Since our test suite uses minio it didn't catch this before. I'll send a PR to fix this.

@martinmr martinmr added the priority/P1 Serious issue that requires eventual attention (can wait a bit) label Feb 26, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/enterprise/backup Related to binary backups priority/P1 Serious issue that requires eventual attention (can wait a bit) status/accepted We accept to investigate/work on it.
Development

Successfully merging a pull request may close this issue.

3 participants