'Kubeflow Pipeline cannot communicate with S3 bucket
I am installing Kubeflow Pipeline on AWS from this official repository: github.com/kubeflow/manifests/tree/master/apps/pipeline/upstream/env/aws
Kubeflow is connected to AWS S3 bucket here. Everything works fine until I try to make one modification - I want to add the following s3-bucket-ssl-requests-only bucket policy to my bucket:
{
"Id": "ExamplePolicy",
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSSLRequestsOnly",
"Action": "s3:*",
"Effect": "Deny",
"Resource": [
"arn:aws:s3:::my_bucket_name",
"arn:aws:s3:::my_bucket_name/*"
],
"Condition": {
"Bool": {
"aws:SecureTransport": "false"
}
},
"Principal": "*"
}
]
}
When I add it, when I run any pipeline, I get the message 'Access denied' in Kubeflow - it looks like Kubeflow communicates with S3 via HTTP by default. I don't know how to modify manifest files so that Kubeflow can communicate with S3 with such bucket policy.
Can anyone help?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
Solution | Source |
---|