storytold/irsa-manager
2
0
Fork 0
mirror of https://github.com/storytold/irsa-manager.git synced 2026-10-09 00:09:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5 from brianr2600/session_token

Browse Source 
Allow short-lived AWS credentials
This commit is contained in:
kkb
2024-09-20 19:43:54 +09:00
committed by GitHub
parent cb39473a47 b117a13dbd
commit 13ae436378
5 changed files with 21 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1
View File
@@ -92,6 +92,7 @@ Create a secret for irsa-manager to access AWS:
kubectl create secret generic aws-secret -n irsa-manager-system \ kubectl create secret generic aws-secret -n irsa-manager-system \
--from-literal=aws-access-key-id=<your-access-key-id> \ --from-literal=aws-access-key-id=<your-access-key-id> \
--from-literal=aws-secret-access-key=<your-secret-access-key> \ --from-literal=aws-secret-access-key=<your-secret-access-key> \
--from-literal=aws-session-token=<your-aws-session-token> # Optional \
--from-literal=aws-region=<your-region> \ --from-literal=aws-region=<your-region> \
--from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles --from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles
charts/irsa-manager/README.md
+1
View File
@@ -22,6 +22,7 @@ helm install irsa-manager kkb0318/irsa-manager -n irsa-manager-system --create-n
kubectl create secret generic aws-secret -n irsa-manager-system \ kubectl create secret generic aws-secret -n irsa-manager-system \
--from-literal=aws-access-key-id=<your-access-key-id> \ --from-literal=aws-access-key-id=<your-access-key-id> \
--from-literal=aws-secret-access-key=<your-secret-access-key> \ --from-literal=aws-secret-access-key=<your-secret-access-key> \
--from-literal=aws-session-token=<your-aws-session-token> # Optional \
--from-literal=aws-region=<your-region> \ --from-literal=aws-region=<your-region> \
--from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles --from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles
charts/irsa-manager/README.md.gotmpl
+1
View File
@@ -22,6 +22,7 @@ helm install irsa-manager kkb0318/irsa-manager -n irsa-manager-system --create-n
kubectl create secret generic aws-secret -n irsa-manager-system \ kubectl create secret generic aws-secret -n irsa-manager-system \
--from-literal=aws-access-key-id=<your-access-key-id> \ --from-literal=aws-access-key-id=<your-access-key-id> \
--from-literal=aws-secret-access-key=<your-secret-access-key> \ --from-literal=aws-secret-access-key=<your-secret-access-key> \
--from-literal=aws-session-token=<your-aws-session-token> # Optional \
--from-literal=aws-region=<your-region> \ --from-literal=aws-region=<your-region> \
--from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles --from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles
charts/irsa-manager/templates/deployment.yaml
+9
View File
@@ -32,16 +32,25 @@ spec:
secretKeyRef: secretKeyRef:
key: aws-access-key-id key: aws-access-key-id
name: aws-secret name: aws-secret
optional: true
- name: AWS_SECRET_ACCESS_KEY - name: AWS_SECRET_ACCESS_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: aws-secret-access-key key: aws-secret-access-key
name: aws-secret name: aws-secret
optional: true
- name: AWS_SESSION_TOKEN
valueFrom:
secretKeyRef:
key: aws-session-token
name: aws-secret
optional: true
- name: AWS_REGION - name: AWS_REGION
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: aws-region key: aws-region
name: aws-secret name: aws-secret
optional: true
- name: AWS_ROLE_ARN - name: AWS_ROLE_ARN
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
config/manager/manager.yaml
+9 -3
View File
@@ -52,19 +52,25 @@ spec:
secretKeyRef: secretKeyRef:
name: aws-secret name: aws-secret
key: aws-access-key-id key: aws-access-key-id
# optional: true optional: true
- name: AWS_SECRET_ACCESS_KEY - name: AWS_SECRET_ACCESS_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: aws-secret name: aws-secret
key: aws-secret-access-key key: aws-secret-access-key
# optional: true optional: true
- name: AWS_SESSION_TOKEN
valueFrom:
secretKeyRef:
name: aws-secret
key: aws-session-token
optional: true
- name: AWS_REGION - name: AWS_REGION
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: aws-secret name: aws-secret
key: aws-region key: aws-region
# optional: true optional: true
- name: AWS_ROLE_ARN - name: AWS_ROLE_ARN
valueFrom: valueFrom:
secretKeyRef: secretKeyRef: