Configuring Pods to use a Kubernetes service account

• https://docs.aws.amazon.com/eks/latest/userguide/pod-configuration.html

apiVersion: apps/v1
kind: Deployment
metadata:
  name: my-app
spec:
  selector:
    matchLabels:
      app: my-app
  template:
    metadata:
      labels:
        app: my-app
    spec:
      serviceAccountName: my-service-account
      containers:
      - name: my-app
        image: public.ecr.aws/nginx/nginx:X.XX

kubectl describe pod my-app-6f4dfff6cb-76cv9 | grep AWS_ROLE_ARN:

Related

• Granting access to an IAM principal to view Kubernetes resources on a cluster
• Kubernetes service account

See also

• Kubernetes service account, ServiceAccount:, kubectl get serviceaccounts, kubectl create serviceaccount, kubectl describe serviceaccount, kubernetes.io/service-account-token, Kubernetes users, Kubernetes groups, Kubernetes roles, ServiceAccountTokenNodeBinding
• EKS RBAC, Amazon EKS authentication, Amazon EKS authorization, aws eks get-token, aws-auth ConfigMap, aws-iam-authenticator, eksctl create iamidentitymapping, eksctl get iamidentitymapping, eks:AccessKubernetesApi, eks-connector, K8s Cluster roles, AmazonEKSAdminPolicy, AmazonEKSClusterAdminPolicy, AmazonEKSAdminViewPolicy, AmazonEKSEditPolicy, AmazonEKSViewPolicy, AmazonEKSAutoNodePolicy, AmazonEKSBlockStoragePolicy, AmazonEKSLoadBalancingPolicy, AmazonEKSNetworkingPolicy, AmazonEKSComputePolicy, AmazonEKSClusterInsightsPolicy, kubernetes_cluster_role_v1