Difference between revisions of "ServiceNow Kubernetes discovery"
Jump to navigation
Jump to search
| Line 22: | Line 22: | ||
* <code>[[kubectl cluster-info]]</code> | * <code>[[kubectl cluster-info]]</code> | ||
* <code>[[kubectl cluster-info]] | grep "Kubernetes control plane"</code> | * <code>[[kubectl cluster-info]] | grep "Kubernetes control plane"</code> | ||
| + | |||
| + | == Related activities == | ||
| + | * [[Enabling IAM principal access to your cluster]] | ||
| + | * [[Access Kubernetes REST API using default token]] | ||
| + | * [[IAM Roles for Service Accounts (IRSA) in EKS]] | ||
| + | * [[How Amazon EKS works with IAM]] | ||
== Related == | == Related == | ||
* <code>[[kubectl config view]]</code>, <code>[[kubectl cluster-info]] | grep "Kubernetes control plane"</code> | * <code>[[kubectl config view]]</code>, <code>[[kubectl cluster-info]] | grep "Kubernetes control plane"</code> | ||
| − | |||
* <code>[[kubectl -n kube-system describe secret]]</code> | * <code>[[kubectl -n kube-system describe secret]]</code> | ||
| − | |||
* [[Base64]]: <code>[[kubectl get secret]] --namespace default grafana -o jsonpath="{.data.admin-password}" | [[base64 --decode]] ; echo</code> | * [[Base64]]: <code>[[kubectl get secret]] --namespace default grafana -o jsonpath="{.data.admin-password}" | [[base64 --decode]] ; echo</code> | ||
| − | |||
| − | |||
* [[TOI: EKS cluster discovery using STS AssumeRoles (Without AWS CLI)]] | * [[TOI: EKS cluster discovery using STS AssumeRoles (Without AWS CLI)]] | ||
* <code>[[cluster-read-only-role]]</code> | * <code>[[cluster-read-only-role]]</code> | ||
Revision as of 14:37, 31 October 2023
Contents
EKS
1) K8s service account (kind: ServiceAccount)
- Creating an IAM OIDC provider for your EKS cluster:
aws iam create-open-id-connect-provider- AWS IAM role. with policy EKSReadOnly
eksctl create iamidentitymapping --cluster yourClusterName --arnarn:aws:iam::yourAccountID:role/yourIAMRoleName --username read-only-user
- Configuring a Kubernetes service account to assume an IAM role
2) sn_itom_pattern.k8s_aws_cli_to_generate_token
- With CLI:
aws eks get-token --cluster-name
3)
- sn_itom_pattern.k8s_midserver
- sn_itom_pattern.k8s_create_schedule_enabled
4) XXX
5) ServiceNow AWS Cloud Discovery: https://docs.servicenow.com/en-US/bundle/vancouver-it-operations-management/page/product/discovery/concept/aws-cloud-discovery.html
K8s
kubectl cluster-infokubectl cluster-info | grep "Kubernetes control plane"
Related activities
- Enabling IAM principal access to your cluster
- Access Kubernetes REST API using default token
- IAM Roles for Service Accounts (IRSA) in EKS
- How Amazon EKS works with IAM
Related
kubectl config view,kubectl cluster-info | grep "Kubernetes control plane"kubectl -n kube-system describe secret- Base64:
kubectl get secret --namespace default grafana -o jsonpath="{.data.admin-password}" | base64 --decode ; echo - TOI: EKS cluster discovery using STS AssumeRoles (Without AWS CLI)
cluster-read-only-role
See also
Advertising:
