This repository has been archived on 2026-03-07. You can view files and clone it. You cannot open issues or pull requests or push a commit.
2019-06-20 13:07:42 +02:00
|
|
|
#!/bin/bash
|
|
|
|
|
|
|
|
|
|
set +u
|
|
|
|
|
|
|
|
|
|
if [[ -z ${AWS_SECRET_ACCESS_KEY} ]]
|
|
|
|
|
then
|
|
|
|
|
IAM_ROLE=$(curl http://169.254.169.254/latest/meta-data/iam/security-credentials/)
|
|
|
|
|
JSON=$(curl http://169.254.169.254/latest/meta-data/iam/security-credentials/${IAM_ROLE})
|
|
|
|
|
export AWS_ACCESS_KEY_ID=$(echo ${JSON} | jq -r '.AccessKeyId')
|
|
|
|
|
export AWS_SECRET_ACCESS_KEY=$(echo ${JSON} | jq -r '.SecretAccessKey')
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
set -euo pipefail
|
|
|
|
|
: ${S3_BUCKET_NAME:?"S3_BUCKET_NAME must be set"}
|
2019-08-02 10:27:54 +02:00
|
|
|
: ${AWS_REGION:?"AWS_REGION must be set"}
|
|
|
|
|
: ${RETURN_URL:?"RETURN_URL must be set"}
|
2019-06-20 13:07:42 +02:00
|
|
|
: ${AWS_ACCESS_KEY_ID:?"AWS_ACCESS_KEY_ID must be set or be possible to fetch from meta-data service on AWS"}
|
|
|
|
|
: ${AWS_SECRET_ACCESS_KEY:?"AWS_ACCESS_KEY_ID must be set or be possible to fetch from meta-data service on AWS"}
|
|
|
|
|
|
|
|
|
|
exec nginx -g 'daemon off;'
|