Difference between revisions of "IAM Roles for Service Accounts (IRSA) in EKS"
Jump to navigation
Jump to search
| Line 4: | Line 4: | ||
| − | + | Requirements: | |
* [[IAM OIDC]] configured | * [[IAM OIDC]] configured | ||
Revision as of 17:50, 31 October 2023
IAM Roles for Service Accounts
Requirements:
- IAM OIDC configured
Activities
- Sep 2019 Read about IRSA for EKS: https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/
- How do I troubleshoot IRSA errors in Amazon EKS? https://repost.aws/knowledge-center/eks-troubleshoot-irsa-errors
- https://www.eksworkshop.com/docs/security/iam-roles-for-service-accounts/add_irsa
- Configuring a Kubernetes service account to assume an IAM role
- How Amazon EKS works with IAM
Related
- IAM OIDC
enable_irsain AWS EKS Terraform module- Terraform module: ebs_csi_irsa_role
karpenter_irsapodIdentityWebhookin kOps- Service Accounts: Kubernetes service accounts
- AWS Roles
service_account_role_arnaws iam list-open-id-connect-providers
See also
- EKS: IRSA, Module:
ebs_csi_irsa_role,enable_irsa - AWS Controllers for Kubernetes (ACK), IRSA
- OIDC,
kubectl oidc-login, AWS IAM OIDC, EKS OIDC, EKS module,aws iam list-open-id-connect-providers | aws iam create-open-id-connect-provider | aws iam get-open-id-connect-provider, OIDC tokens,aws_lb_listener_rule - IAM: AWS IAM Identity Center, AWS Identity and Access Management, Google Cloud IAM, Azure IAM, SailPoint, CyberArk, CIAM, ForgeRock,
iam:ChangePassword,aws iam,AdministratorAccess, Context keys, IAM Access Analyzer, AWS policy, AWS managed policies,IAMUserChangePassword, AWS Roles, List of AWS policies, Resource-based policy,aws-iam-authenticator, IRSA, RDS Authentication,AccessDenied
Advertising:
