--[no-]persist-credentials flag in repository create command

Support
1

Apologies again if this question has been answered elsewhere, I couldn’t find a solution or answer.

I’m creating a repository using the CLI to S3, and since this is being done on a client server, ideally I would like the AWS credentials to not be exposed on the server. I’ve attempted to use the --[no-]persist-credentials flag but haven’t had any success. I’m not sure if this flag is even designed to do this, my understanding is that the AWS credentials won’t be stored in the repository.config file, but please correct me if I’m wrong.

I’ve tried the following combinations of commands:

  • --no-persist-credentials
  • --no-persist-credentials=true
  • --persist-credentials=false
2

--no-persist-credentials will avoid persisting Kopia password, unfortunately provider credentials (such as S3 secrets) currently must currently be stored in the repository.config.

There may be ways around it in the future, though. We might be able to pass those creds using environment variables, etc.