S3 plugin auth (#90)

* S3 plugin auth
- [x] arn role credentials support
- [x] instance profile support
* - [x] Readme update

Author: ahma

README.md

@@ -83,13 +83,14 @@ $ helm install banzaicloud-stable/logging-operator
 ```
 
 
-#### Install S3 output Plugin chart
+#### Install S3 output Plugin chart with Aws Credential Access
 ```bash
 $ helm install  \
 --set bucketName='<Mybucket>' \
 --set region='<S3_REGION>' \
---set secret.awsAccessValue='<AWS_ACCESS_KEY_ID>' \
---set secret.awsSecretValue='<AWS_SECRET_ACCESS_KEY>' \
+--set awsCredentialsAccess.enabled=true \
+--set awsCredentialsAccess.secret.awsAccessValue='<AWS_ACCESS_KEY_ID>' \
+--set awsCredentialsAccess.secret.awsSecretValue='<AWS_SECRET_ACCESS_KEY>' \
 banzaicloud-stable/s3-output
 ```
 

docs/plugins/s3.md

@@ -3,6 +3,10 @@
 | Variable name | Default | Applied function |
 |---|---|---|
 | pattern | - |  |
+| role_arn | - |  |
+| role_session_name | - |  |
+| instance_profile_ip_address | - |  |
+| instance_profile_port | - |  |
 | aws_key_id | - |  |
 | aws_sec_key | - |  |
 | s3_bucket | - |  |
@@ -18,8 +22,25 @@
 <match {{ .pattern }}.** >
   @type s3
 
+  {{- if .role_arn }}
+  <assume_role_credentials>
+    role_arn {{ .role_arn }}
+    role_session_name {{ .role_session_name }}
+  </assume_role_credentials>
+  {{- end }}
+
+  {{- if .instance_profile_ip_address }}
+  <instance_profile_credentials>
+    ip_address {{ .instance_profile_ip_address }}
+    port {{ .instance_profile_port }}
+  </instance_profile_credentials>
+  {{- end }}
+
+  {{- if .aws_key_id }}
   aws_key_id {{ .aws_key_id }}
   aws_sec_key {{ .aws_sec_key }}
+  {{- end }}
+
   s3_bucket {{ .s3_bucket }}
   s3_region {{ .s3_region }}
   {{- if .s3_endpoint }}

pkg/resources/plugins/s3.go

@@ -34,8 +34,24 @@ const S3Template = `
 <match {{ .pattern }}.** >
   @type s3
 
+  {{- if .role_arn }}
+  <assume_role_credentials>
+    role_arn {{ .role_arn }}
+    role_session_name {{ .role_session_name }}
+  </assume_role_credentials>
+  {{- end }}
+
+  {{- if .instance_profile_ip_address }}
+  <instance_profile_credentials>
+    ip_address {{ .instance_profile_ip_address }}
+    port {{ .instance_profile_port }}
+  </instance_profile_credentials>
+  {{- end }}
+
+  {{- if .aws_key_id }}
   aws_key_id {{ .aws_key_id }}
   aws_sec_key {{ .aws_sec_key }}
+  {{- end }}
   s3_bucket {{ .s3_bucket }}
   s3_region {{ .s3_region }}
   {{- if .s3_endpoint }}