Mesusa backup & aws eks : s3 authentication with service account

K8ssandra help
1

Hello,

In AWS EKS, I try to create a s3 backup with medusa using service account and AWS IAM roles. I’ve used the following configuration [1] and used an empty secret as advised in a github issue but the medusa backup is failing with the following error 'The AWS Access Key Id you provided does not exist in '.

How can I configure medusa to use the AWS IAM role of the service account to access the S3 bucket ?

[1]

apiVersion: k8ssandra.io/v1alpha1
kind: K8ssandraCluster
metadata:
  name: demo
  namespace: k8ssandra-operator
spec:
  cassandra:
    serverVersion: "4.0.6"
    serviceAccount: default
    serverImage: k8ssandra/cass-management-api:4.0.6
    storageConfig:
      cassandraDataVolumeClaimSpec:
        storageClassName: aws-ebs-gp3
        accessModes:
          - ReadWriteOnce
        resources:
          requests:
            storage: 5Gi
    config:
      jvmOptions:
        heapSize: 512M
    networking:
      hostNetwork: false
    datacenters:
      - metadata:
          name: dc1
        size: 3
  medusa:
    storageProperties:
      storageProvider: s3
      secure: true
      bucketName: [my bucket]
      region: eu-west-1
      storageSecretRef:
        name: medusa-bucket-key-v4
      prefix: test-k8ssandra
      maxBackupAge: 7

apiVersion: k8ssandra.io/v1alpha1
kind: Secret
metadata:
 name: medusa-bucket-key-v4
type: Opaque
stringData:
   credentials: ''
2

The issue seems to be linked to this cassandra-medusa issue . kubernetes service accounts with IAM roles are still not supported.