Backup S3 reduce permissions

Ref: https://github.com/harvester/harvester/issues/1339

Verify Items

  • Backup target connect to S3 should only require the permission to access the specific bucket

Case: S3 Backup with single-bucket-user

  1. Install Harvester with any nodes
  2. Setup Minio
    1. then follow the instruction to create a single-bucket-user.
    2. Create specific bucket for the user
    3. Create other buckets
  3. setup backup-target with the single-bucket-user permission
    1. When assign the dedicated bucket (for the user), connection should success.
    2. When assign other buckets, connection should failed with AccessDenied error message