# cloud credentials for backup in k8s operator - feature request

**URL:** <https://forums.percona.com/t/cloud-credentials-for-backup-in-k8s-operator-feature-request/7457>\
**Category:** Percona Operator for MongoDB\
**Created:** [March 5, 2020, 4:30am UTC](https://forums.percona.com/t/cloud-credentials-for-backup-in-k8s-operator-feature-request/7457 "2020-03-05T04:30:43Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Oleksii](https://avatars.discourse-cdn.com/v4/letter/o/9de053/32.png) [@Oleksii](https://forums.percona.com/u/Oleksii)\
**Post date:** [March 5, 2020, 4:30am UTC](https://forums.percona.com/t/cloud-credentials-for-backup-in-k8s-operator-feature-request/7457/1 "2020-03-05T04:30:43Z")

</div>

I did not find the Jira project or GitHub repo to ask for a feature request so writing it here…

if storageSpec.S3.CredentialsSecret == “” {  
return nil, fmt.Errorf(“no credentials specified for the secret name %s”, storageName)  
}

It would be nice not to return an error in case no s3.credentials is set for the cluster hosted on the cloud providers. AWS has the ability to get temporary credentials using the role attached to a pod. It is a more secure and flexible way of dealing with credentials. The creds should be renewed on every scheduled run using api call to STS. Maybe add another field in storage config, to have something like this:  
storages:  
s3-backup-bucket:  
type: “s3”  
s3:  
bucket: {{ .Values.backup.storages.s3BackupStorage.s3.bucketName }}  
region: {{ .Values.backup.storages.s3BackupStorage.s3.region }}  
 cloud: “AWS”

and in pkg/psmdb/backup/agent.go

if storageSpec.S3.cloud == “AWS” {  
some\_logic  
}  
elif storageSpec.S3.cloud == “Other\_cloud” {  
some\_logic2  
}  
elif storageSpec.S3.cloud == “”{  
if storageSpec.S3.CredentialsSecret == “” {  
return nil, fmt.Errorf(“no credentials specified for the secret name %s”, storageName)  
}  
}

---

<div class="post-metadata">

**Author:** ![lorraine.pocklington](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/lorraine.pocklington/32/37_2.png) [@lorraine.pocklington](https://forums.percona.com/u/lorraine.pocklington)\
**Post date:** [March 5, 2020, 6:28am UTC](https://forums.percona.com/t/cloud-credentials-for-backup-in-k8s-operator-feature-request/7457/2 "2020-03-05T06:28:51Z")

</div>

Thanks for this, I have brought it to the attention of the team, and I’m finding out if there’s a Jira project for these requests. I’ll report back if I find one.

---

<div class="post-metadata">

**Author:** ![lorraine.pocklington](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/lorraine.pocklington/32/37_2.png) [@lorraine.pocklington](https://forums.percona.com/u/lorraine.pocklington)\
**Post date:** [March 5, 2020, 6:58am UTC](https://forums.percona.com/t/cloud-credentials-for-backup-in-k8s-operator-feature-request/7457/3 "2020-03-05T06:58:46Z")

</div>

OK, found it (I was being slow…!) Here’s the Jira project, and we’d be happy for you to create a feature request there

[url][https://jira.percona.com/projects/K8SPSMDB/issues/K8SPSMDB-176?filter=allopenissues[/url]](https://jira.percona.com/projects/K8SPSMDB/issues/K8SPSMDB-176?filter=allopenissues%5B/url%5D)

---

<div class="post-metadata">

**Author:** ![Oleksii](https://avatars.discourse-cdn.com/v4/letter/o/9de053/32.png) [@Oleksii](https://forums.percona.com/u/Oleksii)\
**Post date:** [March 5, 2020, 8:27am UTC](https://forums.percona.com/t/cloud-credentials-for-backup-in-k8s-operator-feature-request/7457/4 "2020-03-05T08:27:49Z")

</div>

Thank you.  
The feature request: [URL][https://jira.percona.com/projects/K8SPSMDB/issues/K8SPSMDB-185?filter=allissues[/URL]](https://jira.percona.com/projects/K8SPSMDB/issues/K8SPSMDB-185?filter=allissues%5B/URL%5D)

---

<div class="post-metadata">

**Author:** ![lorraine.pocklington](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/lorraine.pocklington/32/37_2.png) [@lorraine.pocklington](https://forums.percona.com/u/lorraine.pocklington)\
**Post date:** [March 5, 2020, 8:41am UTC](https://forums.percona.com/t/cloud-credentials-for-backup-in-k8s-operator-feature-request/7457/5 "2020-03-05T08:41:54Z")

</div>

Great thank you Oleksii, appreciated!