aws-auth-manager
A kuberneres controller to manage the aws-auth configmap in EKS using a new AWSAuthItem CRD.
The aws-auth configmap is used to give RBAC access to IAM users and roles. Because it is a single object, it makes complicated to add and remove entries from multiple sources.
The aws-auth-manager provides the ability to define multiple AWSAuthItem objects that will be merged to create thew aws-auth configmap.
Example spec
apiVersion: aws.maruina.k8s/v1alpha1
kind: AWSAuthItem
metadata:
name: example-one
spec:
mapRoles:
- rolearn: arn:aws:iam::111122223333:role/eksctl-my-cluster-nodegroup-standard-wo-NodeInstanceRole-1WP3NUE3O6UCF
username: system:node:{{EC2PrivateDNSName}}
groups:
- system:bootstrappers
- system:nodes
mapUsers:
- userarn: arn:aws:iam::111122223333:user/admin
username: admin
groups:
- system:masters
- userarn: arn:aws:iam::111122223333:user/ops-user
username: ops-user
groups:
- system:masters
TODO
- Add validation webhook for
roleArnanduserArn - More test cases?
- Helm chart
- Release
0 Jul 30, 2021
1 Nov 17, 2021
33 Jun 3, 2022
3.1k Jun 29, 2022
26 Feb 13, 2022
7 Jun 10, 2022
11 May 18, 2022
3 Feb 28, 2022
53 Jun 22, 2022
4 Oct 31, 2021
2 Nov 4, 2021
0 Mar 4, 2022
12 May 12, 2022
0 Jan 7, 2022
0 Dec 12, 2021
10 Jun 9, 2022
0 Jan 7, 2022
0 Jan 16, 2022
2 Feb 1, 2022