sollhui opened a new pull request, #64766:
URL: https://github.com/apache/doris/pull/64766

   ### What problem does this PR solve?
   
   S3 storage vault creation only treated role ARN as the credential-provider 
path. When users configured `s3.credentials_provider_type` without 
`s3.role_arn`, FE did not persist the provider type into `ObjectStoreInfoPB`, 
and Cloud meta-service still required AK/SK for the vault. The recycler also 
only read credential provider type inside the role ARN branch.
   
   This change allows S3 storage vaults to use an explicit credentials provider 
type without role ARN. FE now writes `cred_provider_type` when 
`s3.credentials_provider_type` or `AWS_CREDENTIALS_PROVIDER_TYPE` is set, Cloud 
meta-service accepts credential-provider-based S3 vaults without AK/SK, and the 
recycler reads the provider type independently from role ARN.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to