Skip to content

Commit

Permalink
docs/management-bundles: add hint that S3 regional endpoint should b…
Browse files Browse the repository at this point in the history
…e used (open-policy-agent#4196)

Global endpoints lead to 307 responses until they're fully provisioned;
that in turn causes the Authorization header to not be forwarded, and
the GET request thus fails.

Signed-off-by: Dan Oliver <dan.oliver@iress.com>
  • Loading branch information
danoliver1 committed Jan 7, 2022
1 parent 829086a commit 3cf8839
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions docs/content/management-bundles.md
Expand Up @@ -525,6 +525,8 @@ bundles:
resource: bundle.tar.gz
```

**NOTE:** the S3 `url` is the bucket's regional endpoint.

##### Metadata Credentials

In order for this to work it is required that the permissions you created in the "Authentication" steps above are embedded in an IAM Role, which is then assigned to the EC2 instance hosting OPA.
Expand All @@ -545,6 +547,8 @@ bundles:
resource: bundle.tar.gz
```

**NOTE:** the S3 `url` is the bucket's regional endpoint.

### Google Cloud Storage

#### OPA Bundle Support
Expand Down

0 comments on commit 3cf8839

Please sign in to comment.