Difference between revisions of "Amazon Cloudformation EKS cluster role"
Jump to navigation
Jump to search
(Created page with "https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html#create-service-role --- AWSTemplateFormatVersion: '2010-09-09' Description: 'Amazon EKS Cluster Role...") |
|||
Line 8: | Line 8: | ||
Resources: | Resources: | ||
− | + | MyeksClusterRole: | |
Type: AWS::IAM::Role | Type: AWS::IAM::Role | ||
Properties: | Properties: | ||
Line 16: | Line 16: | ||
- Effect: Allow | - Effect: Allow | ||
Principal: | Principal: | ||
− | Service: | + | [[Service:]] |
− | - eks.amazonaws.com | + | - [[eks.amazonaws.com]] |
Action: | Action: | ||
− | - sts:AssumeRole | + | - [[sts:AssumeRole]] |
ManagedPolicyArns: | ManagedPolicyArns: | ||
− | - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy | + | - [[arn:aws:iam::aws:policy/AmazonEKSClusterPolicy]] |
Outputs: | Outputs: | ||
Line 27: | Line 27: | ||
RoleArn: | RoleArn: | ||
Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters | Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters | ||
− | Value: !GetAtt | + | Value: ![[GetAtt]] MyeksClusterRole.Arn |
Export: | Export: | ||
− | Name: !Sub "${AWS::StackName}-RoleArn" | + | Name: ![[Sub]] "${AWS::StackName}-RoleArn" |
Revision as of 12:58, 11 November 2021
https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html#create-service-role
--- AWSTemplateFormatVersion: '2010-09-09' Description: 'Amazon EKS Cluster Role' Resources: MyeksClusterRole: Type: AWS::IAM::Role Properties: AssumeRolePolicyDocument: Version: '2012-10-17' Statement: - Effect: Allow Principal: Service: - eks.amazonaws.com Action: - sts:AssumeRole ManagedPolicyArns: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy Outputs: RoleArn: Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters Value: !GetAtt MyeksClusterRole.Arn Export: Name: !Sub "${AWS::StackName}-RoleArn"
Advertising: