Difference between revisions of "Configuring Pods to use a Kubernetes service account"
Jump to navigation
Jump to search
(6 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
* https://docs.aws.amazon.com/eks/latest/userguide/pod-configuration.html | * https://docs.aws.amazon.com/eks/latest/userguide/pod-configuration.html | ||
+ | |||
+ | |||
+ | |||
+ | apiVersion: apps/v1 | ||
+ | [[kind: Deployment]] | ||
+ | metadata: | ||
+ | name: my-app | ||
+ | spec: | ||
+ | selector: | ||
+ | matchLabels: | ||
+ | app: my-app | ||
+ | [[template]]: | ||
+ | metadata: | ||
+ | labels: | ||
+ | app: my-app | ||
+ | [[spec:]] | ||
+ | [[serviceAccountName]]: my-service-account | ||
+ | containers: | ||
+ | - name: my-app | ||
+ | image: public.ecr.aws/nginx/nginx:X.XX | ||
+ | |||
+ | |||
+ | |||
+ | [[kubectl describe pod]] my-app-6f4dfff6cb-76cv9 | grep [[AWS_ROLE_ARN]]: | ||
+ | |||
== Related == | == Related == | ||
* [[Granting access to an IAM principal to view Kubernetes resources on a cluster]] | * [[Granting access to an IAM principal to view Kubernetes resources on a cluster]] | ||
+ | * [[Kubernetes service account]] | ||
== See also == | == See also == | ||
+ | * {{Kubernetes service account}} | ||
* {{EKS RBAC}} | * {{EKS RBAC}} | ||
[[Category:EKS]] | [[Category:EKS]] |
Latest revision as of 17:27, 6 September 2023
apiVersion: apps/v1 kind: Deployment metadata: name: my-app spec: selector: matchLabels: app: my-app template: metadata: labels: app: my-app spec: serviceAccountName: my-service-account containers: - name: my-app image: public.ecr.aws/nginx/nginx:X.XX
kubectl describe pod my-app-6f4dfff6cb-76cv9 | grep AWS_ROLE_ARN:
Related[edit]
- Granting access to an IAM principal to view Kubernetes resources on a cluster
- Kubernetes service account
See also[edit]
- Kubernetes service account, ServiceAccount:,
kubectl get serviceaccounts, kubectl create serviceaccount, kubectl describe serviceaccount
,kubernetes.io/service-account-token
, Kubernetes users, Kubernetes groups, Kubernetes roles,ServiceAccountTokenNodeBinding
- EKS RBAC, Amazon EKS authentication, Amazon EKS authorization,
aws eks get-token, aws-auth ConfigMap, aws-iam-authenticator, eksctl create iamidentitymapping, eksctl get iamidentitymapping, eks:AccessKubernetesApi, eks-connector
, K8s Cluster roles,AmazonEKSAdminPolicy
,AmazonEKSClusterAdminPolicy
Advertising: