storytold/irsa-manager
2
0
Fork 0
mirror of https://github.com/storytold/irsa-manager.git synced 2026-10-09 00:09:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow short-lived AWS credentials

Browse Source 
Add SESSION_TOKEN to aws-secret and the pod
environment. (Fixes #3)
This commit is contained in:
Brian Ristuccia
2024-08-22 16:43:49 -04:00
parent 23efcfc904
commit 3b9e63251b
5 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1
View File
@@ -92,6 +92,7 @@ Create a secret for irsa-manager to access AWS:
kubectl create secret generic aws-secret -n irsa-manager-system \ kubectl create secret generic aws-secret -n irsa-manager-system \
--from-literal=aws-access-key-id=<your-access-key-id> \ --from-literal=aws-access-key-id=<your-access-key-id> \
--from-literal=aws-secret-access-key=<your-secret-access-key> \ --from-literal=aws-secret-access-key=<your-secret-access-key> \
--from-literal=aws-session-token=<your-aws-session-token> # Optional \
--from-literal=aws-region=<your-region> \ --from-literal=aws-region=<your-region> \
--from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles --from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles
charts/irsa-manager/README.md
+1
View File
@@ -22,6 +22,7 @@ helm install irsa-manager kkb0318/irsa-manager -n irsa-manager-system --create-n
kubectl create secret generic aws-secret -n irsa-manager-system \ kubectl create secret generic aws-secret -n irsa-manager-system \
--from-literal=aws-access-key-id=<your-access-key-id> \ --from-literal=aws-access-key-id=<your-access-key-id> \
--from-literal=aws-secret-access-key=<your-secret-access-key> \ --from-literal=aws-secret-access-key=<your-secret-access-key> \
--from-literal=aws-session-token=<your-aws-session-token> # Optional \
--from-literal=aws-region=<your-region> \ --from-literal=aws-region=<your-region> \
--from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles --from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles
charts/irsa-manager/README.md.gotmpl
+1
View File
@@ -22,6 +22,7 @@ helm install irsa-manager kkb0318/irsa-manager -n irsa-manager-system --create-n
kubectl create secret generic aws-secret -n irsa-manager-system \ kubectl create secret generic aws-secret -n irsa-manager-system \
--from-literal=aws-access-key-id=<your-access-key-id> \ --from-literal=aws-access-key-id=<your-access-key-id> \
--from-literal=aws-secret-access-key=<your-secret-access-key> \ --from-literal=aws-secret-access-key=<your-secret-access-key> \
--from-literal=aws-session-token=<your-aws-session-token> # Optional \
--from-literal=aws-region=<your-region> \ --from-literal=aws-region=<your-region> \
--from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles --from-literal=aws-role-arn=<your-role-arn> # Optional: Set this if you want to switch roles
charts/irsa-manager/templates/deployment.yaml
+5
View File
@@ -37,6 +37,11 @@ spec:
secretKeyRef: secretKeyRef:
key: aws-secret-access-key key: aws-secret-access-key
name: aws-secret name: aws-secret
- name: AWS_SESSION_TOKEN
valueFrom:
secretKeyRef:
key: aws-session-token
name: aws-secret
- name: AWS_REGION - name: AWS_REGION
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
config/manager/manager.yaml
+6
View File
@@ -59,6 +59,12 @@ spec:
name: aws-secret name: aws-secret
key: aws-secret-access-key key: aws-secret-access-key
# optional: true # optional: true
- name: AWS_SESSION_TOKEN
valueFrom:
secretKeyRef:
name: aws-secret
key: aws-session-token
# optional: true
- name: AWS_REGION - name: AWS_REGION
valueFrom: valueFrom:
secretKeyRef: secretKeyRef: