Important

New database features are no longer connected to engine versions; features are now enabled independently during scheduled update windows, and “major” and “minor” releases no longer exist in Helios. Please visit the release notes to view the latest features available in your database clusters.

Enable EKS IRSA

Using EKS IRSA in Pipeline Definitions in SingleStore Helios

SingleStore supports IAM Roles for Service Accounts (IRSA) authentication when creating an S3 pipeline. Refer to Load Data from Amazon Web Services (AWS) S3 for an example.

Before creating the pipeline, configure the roles, permissions, and cross account access. Refer to the following for related information:

Cloud Workload Identity and Delegated Entities: Configure cross-account access.
Load Data from Amazon Web Services (AWS) S3: Assign permissions/policies.

Last modified: July 10, 2026

Was this article helpful?

Verification instructions

Note: You must install cosign to verify the authenticity of the SingleStore file.

Use the following steps to verify the authenticity of singlestoredb-server, singlestoredb-toolbox, singlestoredb-studio, and singlestore-client SingleStore files that have been downloaded.

You may perform the following steps on any computer that can run cosign, such as the main deployment host of the cluster.

(Optional) Run the following command to view the associated signature files.
Shell
```
curl undefined
```
Download the signature file from the SingleStore release server.
- Option 1: Click the Download Signature button next to the SingleStore file.
- Option 2: Copy and paste the following URL into the address bar of your browser and save the signature file.
- Option 3: Run the following command to download the signature file.
  Shell
```
curl -O undefined
```

After the signature file has been downloaded, run the following command to verify the authenticity of the SingleStore file.

Shell

echo -n undefined |
    cosign verify-blob --certificate-oidc-issuer https://oidc.eks.us-east-1.amazonaws.com/id/CCDCDBA1379A5596AB5B2E46DCA385BC \
      --certificate-identity https://kubernetes.io/namespaces/freya-production/serviceaccounts/job-worker \
      --bundle undefined \
      --new-bundle-format -

Verified OK

Enable EKS IRSA

On this page

Using EKS IRSA in Pipeline Definitions in SingleStore Helios

Was this article helpful?

On this page

Was this article helpful?