Wire role_arn/role_session_name into Keeper S3 snapshot client

[alexey-milovidov]

Forward role_arn and role_session_name from the auth settings into the CredentialsConfiguration used when constructing the S3 client for Keeper snapshots. The AssumeRole credentials provider chain (AwsAuthSTSAssumeRoleCredentialsProvider) and the S3AuthSettings fields already exist in the public repo — only this call site in KeeperSnapshotManagerS3 was missed when the broader S3 AssumeRole infrastructure was synced from clickhouse-private. Without this, Keeper snapshot uploads cannot use STS-based authentication even though the rest of the server can.

The matching change in clickhouse-private is part of https://github.com/ClickHouse/clickhouse-private/pull/2819.

Changelog category (leave one):

• Improvement

Changelog entry (a user-readable short description of the changes that goes into CHANGELOG.md):

Honor role_arn and role_session_name auth settings in the Keeper S3 snapshot client, allowing snapshot uploads to use STS AssumeRole-based authentication.

Documentation entry for user-facing changes

• Documentation is written (mandatory for new features)

[clickhouse-gh]

Workflow [PR], commit [2541838]

Summary: ✅
Keeper Stress Tests (PR): Grafana: Run details (this run), Grafana: 1vs1 Comparison, Grafana: Historical progression

---

AI Review

Summary

This PR forwards role_arn and role_session_name into the S3::CredentialsConfiguration used by KeeperSnapshotManagerS3, so Keeper snapshot uploads can use STS AssumeRole credentials like other S3 paths. The change is small, targeted, and consistent with existing S3 client wiring, with no correctness or safety issues identified.

ClickHouse Rules

Item	Status	Notes
Deletion logging	✅
Serialization versioning	➖
Core-area scrutiny	✅
No test removal	✅
Experimental gate	➖
No magic constants	✅
Backward compatibility	✅
SettingsChangesHistory.cpp	➖
PR metadata quality	✅
Safe rollout	✅
Compilation time	✅
No large/binary files	✅

Final Verdict

• Status: ✅ Approve

[clickhouse-gh]

LLVM Coverage Report

Metric	Baseline	Current	Δ
Lines	84.10%	84.10%	+0.00%
Functions	91.10%	91.10%	+0.00%
Branches	76.60%	76.60%	+0.00%

Changed lines: 100.00% (8/8) · Uncovered code

Full report · Diff report