Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for deploying Config as Data UI to EKS #165

Open
ChristopherFry opened this issue Oct 6, 2022 · 2 comments
Open

Add support for deploying Config as Data UI to EKS #165

ChristopherFry opened this issue Oct 6, 2022 · 2 comments
Assignees
Labels
enhancement New feature or request

Comments

@ChristopherFry
Copy link
Collaborator

Add support for deploying the Config as Data UI to Amazon Elastic Kubernetes Service (EKS).

@ChristopherFry ChristopherFry added the enhancement New feature or request label Oct 6, 2022
@ChristopherFry ChristopherFry self-assigned this Oct 6, 2022
@ChristopherFry
Copy link
Collaborator Author

This is related to kptdev/kpt#3480, with the exception that this is a specific request for EKS.

@kferrone
Copy link

kferrone commented Oct 6, 2022

IAM Users/Roles would be mapped in the aws-auth ConfigMap to a Group. Then those groups can be bound to Roles and ClusterRoles in k8s. Then client would retrieve token from AWS using the KubeConfig exec in the user section like this:

- name: some-user
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1beta1
      command: aws
      args:
      - eks
      - get-token
      - --region
      - us-west-2
      - --cluster-name
      - my-cluster
      - --role-arn
      - arn:aws:iam::123456789:role/my-admin
      env:
      - name: AWS_PROFILE
        value: my-account
      interactiveMode: IfAvailable
      provideClusterInfo: false

The docs are here:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants