Mender on EKS can't access my S3 Bucket

JamesTann
Fri, 30 Aug 2024 15:54:56 +0000
General Discussions

Hello,

I am new to Mender and trying to deploy mender-server 3.7.7 with Kubernetes on AWS EKS.

All my pods are online except mender-deployments which fails with the following error:

main: failed to setup storage client: s3: failed to check bucket preconditions: s3: insufficient permissions for accessing bucket '<my s3 bucket>'

I have confirmed that the IAM role used by the EC2 instance the pod is deployed to has permissions to access the bucket (in fact, I gave it S3FullAccess just to test).

Here is my S3 config that I used when installing Mender:

s3:
    AWS_URI: "https://s3.us-east-2.amazonaws.com"
    AWS_BUCKET: "<my s3 bucket>"
    AWS_REGION: "us-east-2"
    AWS_ACCESS_KEY_ID: ""
    AWS_SECRET_ACCESS_KEY: ""
    AWS_FORCE_PATH_STYLE: "false"

I read in the docs that AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are not needed if deployed to EC2 and using the correct IAM role and permissions (which seems to be the case as far as I can tell). I tried deploying with them absent, and also as empty strings, in case there is a difference.

Is there anything obvious that I am missing or any suggestions on how to debug the issue?

5 posts - 2 participants