Skip to content

Latest commit

 

History

History
31 lines (19 loc) · 930 Bytes

auth_to_storage_providers.md

File metadata and controls

31 lines (19 loc) · 930 Bytes
Raw
version
v1.8.0

Authenticating to cloud storage providers

Helmsman can read files like certificates for connecting to the cluster or TLS certificates for communicating with Tiller from some cloud storage providers; namely: GCS, S3 and Azure blob storage. Below is the authentication requirement for each provider:

AWS S3

You need to provide ALL the following AWS env variables:

  • AWS_ACCESS_KEY_ID
  • AWS_SECRET_ACCESS_KEY
  • AWS_DEFAULT_REGION

Google GCS

You need to provide ONE of the following env variables:

  • GOOGLE_APPLICATION_CREDENTIALS the absolute path to your Google cloud credentials.json file.
  • Or, GCLOUD_CREDENTIALS the content of the credentials.json file.

If running inside GCP helmsman can use metadata server to use Service Account permissions.

Microsoft Azure

You need to provide ALL of the following env variables:

  • AZURE_STORAGE_ACCOUNT
  • AZURE_STORAGE_ACCESS_KEY