Difference between revisions of "Enabling IAM principal access to your cluster"
Jump to navigation
Jump to search
Line 7: | Line 7: | ||
== See also == | == See also == | ||
* {{aws-iam-authenticator}} | * {{aws-iam-authenticator}} | ||
+ | * {{aws-auth}} | ||
* {{K8s RBAC}} | * {{K8s RBAC}} | ||
[[Category:AWS]] | [[Category:AWS]] |
Revision as of 16:50, 12 September 2023
Related
- AWS IAM Authenticator for Kubernetes configured in aws-auth ConfigMap
See also
- AWS IAM Authenticator for Kubernetes:
aws-iam-authenticator
: [token | verify | add | init | server | version | --help
],configmap/aws-auth
,AmazonEKSAdminPolicy
,AmazonEKSClusterAdminPolicy
- AWS IAM Authenticator for Kubernetes:
aws-auth, kubectl edit -n kube-system configmap/aws-auth, eksctl create iamidentitymapping
,mapUsers:, mapRoles:, mapAccounts:
- Kubernetes RBAC
kubectl auth, kubectl auth can-i, kubectl auth reconcile
kubectl create [ role | clusterrole | clusterrolebinding
|rolebinding | serviceaccount ], groups:
, Kubernetes RBAC good practices,kube2iam
, K8s Cluster roles,rbac.authorization.k8s.io
,system:
Advertising: