Mikhail f. Shiryaev comments

Results 366 comments of


                                            Mikhail f. Shiryaev

AWS IAM authorization with non-standard profile

Sure, here it is: ``` { "Code": "Success", "LastUpdated": "2024-12-13T10:29:23Z", "Type": "AWS-HMAC", "AccessKeyId": "ASI...", "SecretAccessKey": "XU...", "Token": "IQoJb3J..", "Expiration": "2024-12-13T17:04:35Z" } ``` And here's the part of `aws s3 ls...

AWS IAM authorization with non-standard profile

With automatic IAM profile resolution? :star_struck:

`clickhouse` image: questions to make it slim, remove unnecessary dependencies

Now it's clear regarding alpine, thanks! If we'd go for the direction `COPY --from=clickhouse:$VERSION ...`, can we define it in the same LDF? For example, the tag `25.8.2.32` and `25.8.2.32-slim`...

`clickhouse` image: questions to make it slim, remove unnecessary dependencies

Thanks! We'll work in this direction

`clickhouse` image: questions to make it slim, remove unnecessary dependencies

Another potential security improvement, we want to run the containers as non-root `clickhouse` user by default. I see other DB images don't do it, but some images do. https://github.com/ClickHouse/ClickHouse/pull/89718/files#diff-430817660f9a8f75103a9617b8ab1a9a38a14fef5f22c50b301c2a0a06d89875, added...

`clickhouse` image: questions to make it slim, remove unnecessary dependencies

Thanks, it's a valid input. I'll experiment more with different cases to find if it's a problem or just a slight inconvenient.