Difference between revisions of "Amazon Cloudformation EKS cluster role"

From wikieduonline
Jump to navigation Jump to search
(Created page with "https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html#create-service-role --- AWSTemplateFormatVersion: '2010-09-09' Description: 'Amazon EKS Cluster Role...")
 
 
(11 intermediate revisions by the same user not shown)
Line 6: Line 6:
 
   
 
   
 
   
 
   
−
  Resources:  
+
  [[Resources:]]
 
   
 
   
−
   eksClusterRole:
+
   MyeksClusterRole:
−
     Type: AWS::IAM::Role
+
     Type: [[AWS::IAM::Role]]
 
     Properties:
 
     Properties:
 
       AssumeRolePolicyDocument:
 
       AssumeRolePolicyDocument:
Line 16: Line 16:
 
         - Effect: Allow
 
         - Effect: Allow
 
           Principal:
 
           Principal:
−
             Service:
+
             [[Service:]]
−
             - eks.amazonaws.com
+
             - [[eks.amazonaws.com]]
 
           Action:
 
           Action:
−
           - sts:AssumeRole
+
           - [[sts:AssumeRole]]
 
       ManagedPolicyArns:
 
       ManagedPolicyArns:
−
         - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy
+
         - [[arn:aws:iam::aws:policy/AmazonEKSClusterPolicy]]
 
   
 
   
−
  Outputs:
+
  [[Outputs:]]
 
   
 
   
−
   RoleArn:
+
   [[RoleArn:]]
 
     Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters
 
     Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters
−
     Value: !GetAtt eksClusterRole.Arn
+
     Value: ![[GetAtt]] MyeksClusterRole.Arn
 
     Export:
 
     Export:
−
       Name: !Sub "${AWS::StackName}-RoleArn"
+
       Name: ![[Sub]] "${AWS::StackName}-RoleArn"
 +
 
 +
== Web console options ==
 +
EKS - Allows EKS to manage clusters on your behalf.
 +
EKS - Cluster - Allows access to other AWS service resources that are required to operate clusters managed by EKS.
 +
EKS - Connector - Allows access to other AWS service resources that are required to connect to external clusters
 +
EKS - Fargate pod - Allows access to other AWS service resources that are required to run Amazon EKS pods on AWS Fargate.
 +
EKS - Fargate profile - Allows EKS to run Fargate tasks.
 +
EKS - [[Nodegroup]] - Allow EKS to manage nodegroups on your behalf.
 +
 
 +
== Related ==
 +
* <code>[[aws eks create-cluster]]</code>
 +
* <code>[[aws iam create-role]]</code>
 +
 
 +
== See also ==
 +
* {{EKS}}
 +
* {{aws iam}}
 +
 
 +
[[Category:EKS]]

Latest revision as of 02:04, 16 February 2022

https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html#create-service-role 

---
AWSTemplateFormatVersion: '2010-09-09'
Description: 'Amazon EKS Cluster Role'


Resources: 

  MyeksClusterRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Principal:
            Service:
            - eks.amazonaws.com
          Action:
          - sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy

Outputs:

  RoleArn:
    Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters
    Value: !GetAtt MyeksClusterRole.Arn
    Export:
      Name: !Sub "${AWS::StackName}-RoleArn"

Web console options[edit]

EKS - Allows EKS to manage clusters on your behalf.
EKS - Cluster - Allows access to other AWS service resources that are required to operate clusters managed by EKS.
EKS - Connector - Allows access to other AWS service resources that are required to connect to external clusters
EKS - Fargate pod - Allows access to other AWS service resources that are required to run Amazon EKS pods on AWS Fargate.
EKS - Fargate profile - Allows EKS to run Fargate tasks.
EKS - Nodegroup - Allow EKS to manage nodegroups on your behalf.

Related[edit]

See also[edit]

Retrieved from "https://www.wikieduonline.com/index.php?title=Amazon_Cloudformation_EKS_cluster_role&oldid=116131"

Advertising: