From 2c225389db80efa179097657e5a1536bb903cd2c Mon Sep 17 00:00:00 2001 From: Rajashree Mandaogane Date: Tue, 5 Apr 2022 22:24:48 -0700 Subject: [PATCH 1/2] Update IRSA doc to point to the working commit and image tag --- docs/content/en/docs/reference/clusterspec/irsa.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/content/en/docs/reference/clusterspec/irsa.md b/docs/content/en/docs/reference/clusterspec/irsa.md index 7fc0e86c065a..76f64bf8c59e 100644 --- a/docs/content/en/docs/reference/clusterspec/irsa.md +++ b/docs/content/en/docs/reference/clusterspec/irsa.md @@ -96,7 +96,13 @@ Set the remaining fields in [cluster spec](https://anywhere.eks.amazonaws.com/do 1. After hosting the service account public signing key and OIDC discovery documents, the applications running in pods can start accessing the desired AWS resources, as long as the pod is mounted with the right service account tokens. This part of configuring the pods with the right service account tokens and env vars is automated by the [amazon pod identity webhook](https://github.com/aws/amazon-eks-pod-identity-webhook). Once the webhook is deployed, it mutates any pods launched using service accounts annotated with `eks.amazonaws.com/role-arn` -1. Follow the [in-cluster installation steps](https://github.com/aws/amazon-eks-pod-identity-webhook#in-cluster) for amazon-eks-pod-identity-webhook. While running the make target, make sure the $KUBECONFIG env var is set to the path of the EKS Anywhere cluster. +1. Check out [this commit](https://github.com/aws/amazon-eks-pod-identity-webhook/commit/a65cc3d9c61cf6fc43f0f985818c474e0867d786) of the amazon-eks-pod-identity-webhook. + +1. Set the $KUBECONFIG env var to the path of the EKS Anywhere cluster. Run the following command: + + ```bash + make cluster-up IMAGE=amazon/amazon-eks-pod-identity-webhook:a65cc3d + ``` #### Configure the trust relationship for the OIDC provider's IAM Role From f338acad4c6fe3dce37411f4aa57a41cd30911f4 Mon Sep 17 00:00:00 2001 From: Rajashree Mandaogane Date: Thu, 7 Apr 2022 12:04:00 -0700 Subject: [PATCH 2/2] Update docs/content/en/docs/reference/clusterspec/irsa.md Co-authored-by: Chris Negus --- docs/content/en/docs/reference/clusterspec/irsa.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/content/en/docs/reference/clusterspec/irsa.md b/docs/content/en/docs/reference/clusterspec/irsa.md index 76f64bf8c59e..289f18a05eaf 100644 --- a/docs/content/en/docs/reference/clusterspec/irsa.md +++ b/docs/content/en/docs/reference/clusterspec/irsa.md @@ -98,7 +98,8 @@ Set the remaining fields in [cluster spec](https://anywhere.eks.amazonaws.com/do 1. Check out [this commit](https://github.com/aws/amazon-eks-pod-identity-webhook/commit/a65cc3d9c61cf6fc43f0f985818c474e0867d786) of the amazon-eks-pod-identity-webhook. -1. Set the $KUBECONFIG env var to the path of the EKS Anywhere cluster. Run the following command: +1. Set the $KUBECONFIG env var to the path of the EKS Anywhere cluster. +1. Run the following command: ```bash make cluster-up IMAGE=amazon/amazon-eks-pod-identity-webhook:a65cc3d