Hi, guys! Could you help with s3 credentials. I can run hello_world example in sandbox env, but I am failing to do so on our local k8s cluster.

raise FlyteAssertion(
flytekit.exceptions.user.FlyteAssertion: Failed to get data from <s3://blabs-flyte-mgmt-metadata/dispute-resolution/development/BP7IZUPWYESUYFGRO52LE7HBDU======/scriptmode.tar.gz> to /root/ (recursive=False).

Original exception: Access Denied

We don’t have any auth yet for flyte. I assume I just haven’t specified s3 bucket endpoint, access_key_id, and secret_access_key. Where should I do this? In my

.flyte/config.yaml

? Or on

k8s/values.yaml

side via devops support? If so what is the template?

storage:
  access-key: <SECRET>
  auth-type: iam
  disable-ssl: false
  endpoint: <s3://blabs-flyte-mgmt-metadata>
  region: eu-central-1
  secret-key: <SECRET>

I don’t understand how to use this page https://docs.flyte.org/projects/flytekit/en/latest/generated/flytekit.configuration.S3Config.html

what helm chart are you on?

k8s/Chart.yaml

apiVersion: v2
dependencies:
  - condition: flyte.enabled
    name: flyte-core
    alias: flyte
    repository: <https://flyteorg.github.io/flyte>
    version: v1.3.0
description: Helm chart for flyte deployment
name: flyte
version: 0.1.0

this is on EKS? Or a local cluster?

Eks

check that the role is set up with the right iam role via irsa?

I am not really good at aws. So it can be modified only by devops admin? It has no connection to my local .flyte/config.yaml?

this is a devops question yes

@mykyta luzan I just released this https://github.com/davidmirror-ops/flyte-the-hard-way I hope it's useful for you in some way. In any case, would be great to have your opinion