AWS EKS IRSA for Zot

[huynguyen-anduin]

I'm using S3 for storageDriver and DynamoDb for cacheDriver. Based on this documentation, env AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and credentials file are supported.

I'm trying to deploy Zot with IAM Roles for Service Account on my EKS cluster. But failed to create Pod with error:

{"level":"error","error":"operation error DynamoDB: CreateTable, get identity: get credentials: failed to refresh cached credentials, failed to retrieve credentials, operation error STS: AssumeRoleWithWebIdentity, https response error StatusCode: 404, RequestID: ***, api error UnknownError: UnknownError","tableName":"MyZotBlobTable","goroutine":1,"caller":"zotregistry.dev/zot/pkg/storage/cache/dynamodb.go:98","time":"2024-12-26T09:05:15.053656375Z","message":"failed to create table for cache"}

{"level":"error","error":"operation error DynamoDB: CreateTable, get identity: get credentials: failed to refresh cached credentials, failed to retrieve credentials, operation error STS: AssumeRoleWithWebIdentity, https response error StatusCode: 404, RequestID: ***, api error UnknownError: UnknownError","goroutine":1,"caller":"zotregistry.dev/zot/pkg/cli/server/root.go:76","time":"2024-12-26T09:05:15.053700839Z","message":"failed to init controller"}

Zot does not support IRSA for now or I'm missing something?

Confirmed that my IRSA has enough permission.

[huynguyen-anduin]

Seems zot is supported yet.

https://github.com/project-zot/zot/blob/main/pkg/storage/cache/dynamodb.go#L86

[rchincha]

@huynguyen-anduin

#2650