aws-samples / aws-samples/amazon-eks-security-immersion-day

DevSecOps : use new EKS api access instead of Configmap

Open
#18 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
10
Forks
5
Avg merge
12m
Merged PRs (30d)
13

Description

Some customers updated the cluster to use only the API, so when using this module, they couln't use any more the aws-auth config map.

We should update the module to use EKS access management API instead:

https://catalog.us-east-1.prod.workshops.aws/event/dashboard/en-US/workshop/12-image-security/3-devsecops-pipeline/1-solution-architecture-devsecops-pipeline-pushing-containers-to-eks/1b-create-iam-role

```
eksctl create iamidentitymapping \
--cluster eksworkshop-eksctl \
--arn arn:aws:iam::${ACCOUNT_ID}:role/EksWorkshopCodeBuildKubectlRole \
--username build \
--group system:masters
```

Contributor guide

Open the contributing guide

Research direction

Locate the module's handling of the aws-auth ConfigMap and review how the EKS access management API should replace it. Use the linked IAM role and eksctl create iamidentitymapping example as context; done means customers using API-only cluster access can use the module without relying on aws-auth.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, devops, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.