mirror of
https://github.com/hanzoai/traces.git
synced 2026-10-30 18:20:41 +00:00
bf2e2f039d
* Update MinIO broken link in s3.md Updated the link for MinIO client credentials configuration file to the latest documentation. * Update docs/sources/tempo/configuration/hosted-storage/s3.md --------- Co-authored-by: Kim Nylander <[email protected]>
1.8 KiB
1.8 KiB
title, menuTitle, description, aliases
| title | menuTitle | description | aliases | |
|---|---|---|---|---|
| Amazon S3 permissions | Amazon S3 | Set Amazon S3 permissions for Tempo. |
|
Amazon S3 permissions
For configuration options, refer to the storage section on the configuration page.
The following authentication methods are supported:
- AWS environment variables
AWS_ACCESS_KEY_IDandAWS_SECRET_ACCESS_KEY - Static access key and secret credentials specified in
access_keyandsecret_key - MinIO environment variables
MINIO_ACCESS_KEYandMINIO_SECRET_KEY - AWS shared credentials configuration file
- MinIO client credentials configuration file
- AWS IAM (IRSA via WebIdentity,
- AWS EC2 instance role)
- AWS EKS Pod Identity
The following IAM policy shows minimal permissions required by Tempo, where the bucket has already been created.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "TempoPermissions",
"Effect": "Allow",
"Action": [
"s3:PutObject",
"s3:GetObject",
"s3:ListBucket",
"s3:DeleteObject",
"s3:GetObjectTagging",
"s3:PutObjectTagging"
],
"Resource": ["arn:aws:s3:::<bucketname>/*", "arn:aws:s3:::<bucketname>"]
}
]
}
Lifecycle policy
A lifecycle policy is recommended that deletes incomplete multipart uploads after one day.