Merge pull request #1345 from harshavardhana/creds

Refactor credentials management to support multiple mechanisms.
This commit is contained in:
Alexander Neumann 2017-10-11 21:01:19 +02:00
commit 0addd90e14

View File

@ -40,24 +40,31 @@ func open(cfg Config, rt http.RoundTripper) (*Backend, error) {
minio.MaxRetry = int(cfg.MaxRetries) minio.MaxRetry = int(cfg.MaxRetries)
} }
var client *minio.Client // Chains all credential types, starting with
var err error // Static credentials provided by user.
// IAM profile based credentials. (performs an HTTP
if cfg.KeyID == "" || cfg.Secret == "" { // call to a pre-defined endpoint, only valid inside
debug.Log("key/secret not found, trying to get them from IAM") // configured ec2 instances)
creds := credentials.NewIAM("") // AWS env variables such as AWS_ACCESS_KEY_ID
client, err = minio.NewWithCredentials(cfg.Endpoint, creds, !cfg.UseHTTP, "") // Minio env variables such as MINIO_ACCESS_KEY
creds := credentials.NewChainCredentials([]credentials.Provider{
if err != nil { &credentials.Static{
return nil, errors.Wrap(err, "minio.NewWithCredentials") Value: credentials.Value{
} AccessKeyID: cfg.KeyID,
} else { SecretAccessKey: cfg.Secret,
debug.Log("key/secret found") },
client, err = minio.New(cfg.Endpoint, cfg.KeyID, cfg.Secret, !cfg.UseHTTP) },
&credentials.IAM{
if err != nil { Client: &http.Client{
return nil, errors.Wrap(err, "minio.New") Transport: http.DefaultTransport,
} },
},
&credentials.EnvAWS{},
&credentials.EnvMinio{},
})
client, err := minio.NewWithCredentials(cfg.Endpoint, creds, !cfg.UseHTTP, "")
if err != nil {
return nil, errors.Wrap(err, "minio.NewWithCredentials")
} }
sem, err := backend.NewSemaphore(cfg.Connections) sem, err := backend.NewSemaphore(cfg.Connections)