Difference between revisions of "ServiceNow Kubernetes discovery"
Jump to navigation
Jump to search
| Line 31: | Line 31: | ||
* [[Base64]]: <code>[[kubectl get secret]] --namespace default grafana -o jsonpath="{.data.admin-password}" | [[base64 --decode]] ; echo</code> | * [[Base64]]: <code>[[kubectl get secret]] --namespace default grafana -o jsonpath="{.data.admin-password}" | [[base64 --decode]] ; echo</code> | ||
* [[IAM Roles for Service Accounts (IRSA) in EKS]] | * [[IAM Roles for Service Accounts (IRSA) in EKS]] | ||
| + | * [[How Amazon EKS works with IAM]] | ||
== See also == | == See also == | ||
Revision as of 10:52, 31 October 2023
Contents
EKS
1) K8s service account (kind: ServiceAccount)
- Creating an IAM OIDC provider for your EKS cluster:
aws iam create-open-id-connect-provider- AWS IAM role. with policy EKSReadOnly
eksctl create iamidentitymapping --cluster yourClusterName --arnarn:aws:iam::yourAccountID:role/yourIAMRoleName --username read-only-user
- Configuring a Kubernetes service account to assume an IAM role
2) sn_itom_pattern.k8s_aws_cli_to_generate_token
- With CLI:
aws eks get-token --cluster-name
3)
- sn_itom_pattern.k8s_midserver
- sn_itom_pattern.k8s_create_schedule_enabled
4) XXX
5) ServiceNow AWS Cloud Discovery: https://docs.servicenow.com/en-US/bundle/vancouver-it-operations-management/page/product/discovery/concept/aws-cloud-discovery.html
K8s
kubectl cluster-infokubectl cluster-info | grep "Kubernetes control plane"
Related
kubectl config viewkubectl cluster-info | grep "Kubernetes control plane"- Enabling IAM principal access to your cluster
kubectl -n kube-system describe secret- Access Kubernetes REST API using default token
- Base64:
kubectl get secret --namespace default grafana -o jsonpath="{.data.admin-password}" | base64 --decode ; echo - IAM Roles for Service Accounts (IRSA) in EKS
- How Amazon EKS works with IAM
See also
Advertising:
