Docker Registry to support AWS IAM roles for S3 storage

[jhmartin]

The docker registry should support fetching temporary credentials via the AWS IAM instance-role function rather than requiring hardcoded credentials.

[stevvooe]

@jhmartin How would this work? Do you have links to documentation?

As far as I understand, this is handled on the aws package side, so it is really outside the scope of the registry. This may be already supported. Have you tried it?

[stevvooe]

Confirmed this is already supported: https://github.com/docker/distribution/blob/master/Godeps/_workspace/src/github.com/AdRoll/goamz/aws/aws.go#L319.

[jhmartin]

Oh! I saw 'required' in the documentation for the access/secret key fields and assumed I would get an error if I omitted them. Excellent.

[moshe0076]

If you are using IAM role just remove the:
accesskey: awsaccesskey
secretkey: awssecretkey
lines from the config.yml and it should work.

[rokka-n]

Can somebody fix the documentation, if it's already implemented?
It's still mentioned that keys required:
https://docs.docker.com/registry/storage-drivers/s3/

[stevvooe]

@mstanleyjones PTAL

[mdlinville]

docker/docs#1711