eks-irsa-policy-document

andreswebs/eks-irsa-policy-document/aws

Terraform Module HCL AWS

Creates a trust policy for an IAM role that can be assumed by a Kubernetes service account

Install

module "eks-irsa-policy-document" {

source = "andreswebs/eks-irsa-policy-document/aws"

version = "1.0.0"

}

plain text: /constructs/tfmod-andreswebs-eks-irsa-policy-document-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

[//]: # (BEGIN_TF_DOCS) terraform-aws-eks-irsa-policy-document Creates a trust policy for an IAM role that can be assumed by a Kubernetes service account. The cluster OIDC provider value can be found with the command: ``sh aws eks describe-cluster \ --name "${CLUSTER_NAME}" \ --query "cluster.identity.oidc.issuer" \ --output text | sed -e "s/^https:\\/\\///" ` Usage Example: `hcl module "k8s_assume_role_policy" { source = "github.com/andreswebs/terraform-aws-eks-irsa-policy-document" k8s_sa_name = "hyperapp" k8s_sa_namespace = "frontend" cluster_oidc_provider = var.cluster_oidc_provider } resource "aws_iam_role" "hyperapp" { name = "hyperapp" assume_role_policy = module.k8s_assume_role_policy.json } ` Inputs | Name | Description | Type | Default | Required | |------|-------------|------|--

Inputs (3)

Name	Type	Description	Default
cluster_oidc_provider	string	OpenID Connect (OIDC) Identity Provider associated with the Kubernetes cluster	required
k8s_sa_name	string	Name of the Kubernetes service account	`"default"`
k8s_sa_namespace	string	Namespace of the Kubernetes namespace	`"default"`