aws / aws/containers-roadmap

[EKS] [request]: Support podIdentityAssociations in EKS Community Add-ons "cert-manager"

Open
#2,712 0 comments 4 reactions 0 assignees View on GitHub
EKS EKS Add-Ons Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
Please support podIdentityAssociations in the EKS Community Add-ons "cert-manager".

**Which service(s) is this request for?**
EKS Add-ons

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
Currently, specifying the podIdentityAssociations parameter when creating EKS Community Add-ons "cert-manager" fails.

```
❯ aws eks create-addon \
--cluster-name CLUSTER_NAME \
--addon-name cert-manager \
--addon-version v1.19.1-eksbuild.1 \
--pod-identity-associations serviceAccount=cert-manager,roleArn=ROLE_ARN

An error occurred (InvalidParameterException) when calling the CreateAddon operation: Pod Identity feature is not supported for addon version: v1.19.1-eksbuild.1
```

Executing the following separately increases management costs:
- Creating EKS Community Add-ons "cert-manager"
- Configuring Pod Identity

**Are you currently working around this issue?**
After creating EKS Community Add-ons "cert-manager", we need to configure Pod Identity separately.

Contributor guide

Open the contributing guide

Research direction

Start with the aws eks create-addon example and the cert-manager add-on version named in the issue. Investigate how podIdentityAssociations are handled for this add-on; done means creating the add-on with that parameter succeeds without the reported unsupported-feature error.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.