From 8457bf8733d02fa39e4dbda9b5ea19713a50cb06 Mon Sep 17 00:00:00 2001
From: Marc <7050295+marcleblanc2@users.noreply.github.com>
Date: Fri, 24 Jul 2026 15:42:53 -0600
Subject: [PATCH 1/2] Add syntacticCodeIntel to S3 bucket example

DS thread https://sourcegraph.sourcegraph.com/deepsearch/10f82edc-b90b-4453-8471-563ddb4fa8ec says Syntactic also needs the bucket config
---
 .../examples/external-object-storage/override.yaml            | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/charts/sourcegraph/examples/external-object-storage/override.yaml b/charts/sourcegraph/examples/external-object-storage/override.yaml
index 2e6adc483..1694bb76e 100644
--- a/charts/sourcegraph/examples/external-object-storage/override.yaml
+++ b/charts/sourcegraph/examples/external-object-storage/override.yaml
@@ -32,3 +32,7 @@ frontend:
 preciseCodeIntel:
   env:
     <<: *objectStorageEnv
+
+syntacticCodeIntel:
+  env:
+    <<: *objectStorageEnv

From cda390916c3a0cf14cfd3f2643af3d2da3885ce0 Mon Sep 17 00:00:00 2001
From: Marc <7050295+marcleblanc2@users.noreply.github.com>
Date: Fri, 24 Jul 2026 15:56:51 -0600
Subject: [PATCH 2/2] Add example for IRSA auth

Added support for IRSA role-based authentication and clarified access key usage in the external object storage configuration.
---
 .../examples/external-object-storage/override.yaml         | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/charts/sourcegraph/examples/external-object-storage/override.yaml b/charts/sourcegraph/examples/external-object-storage/override.yaml
index 1694bb76e..db79f6398 100644
--- a/charts/sourcegraph/examples/external-object-storage/override.yaml
+++ b/charts/sourcegraph/examples/external-object-storage/override.yaml
@@ -16,6 +16,8 @@ objectStorageEnv: &objectStorageEnv
     value: https://s3.us-east-1.amazonaws.com
   PRECISE_CODE_INTEL_UPLOAD_AWS_REGION:
     value: us-east-1
+
+  # If using access key for authentication
   PRECISE_CODE_INTEL_UPLOAD_AWS_ACCESS_KEY_ID:
     secretKeyRef: # Pre-existing secret, not created by this chart
       name: sourcegraph-s3-credentials
@@ -25,6 +27,11 @@ objectStorageEnv: &objectStorageEnv
       name: sourcegraph-s3-credentials
       key: PRECISE_CODE_INTEL_UPLOAD_AWS_SECRET_ACCESS_KEY
 
+  # If using IRSA for role-based authentication on the Kubernetes service account
+  # Do not set ACCESS_KEY_ID or SECRET_ACCESS_KEY; omitting them triggers fallback to IRSA
+  PRECISE_CODE_INTEL_UPLOAD_AWS_USE_EC2_ROLE_CREDENTIALS:
+    value: "true"
+
 frontend:
   env:
     <<: *objectStorageEnv