This is the Linux app named Amazon EKS Pod Identity Webhook whose latest release can be downloaded as v0.5.1.zip. It can be run online in the free hosting provider OnWorks for workstations.
Download and run online this app named Amazon EKS Pod Identity Webhook with OnWorks for free.
Follow these instructions in order to run this app:
- 1. Downloaded this application in your PC.
- 2. Enter in our file manager https://www.onworks.net/myfiles.php?username=XXXXX with the username that you want.
- 3. Upload this application in such filemanager.
- 4. Start the OnWorks Linux online or Windows online emulator or MACOS online emulator from this website.
- 5. From the OnWorks Linux OS you have just started, goto our file manager https://www.onworks.net/myfiles.php?username=XXXXX with the username that you want.
- 6. Download the application, install it and run it.
SCREENSHOTS:
Amazon EKS Pod Identity Webhook
DESCRIPTION:
This webhook is for mutating pods that will require AWS IAM access. After version v0.3.0, --in-cluster=true no longer works and is deprecated. Please use --in-cluster=false and manage the cluster certificate with a cert-manager or some other external certificate provisioning system. This is because certificates using the legacy-unknown signer are no longer signed when using the v1 certificates API. Create an OIDC provider in IAM for your cluster. You can find the OIDC discovery endpoint by describing your EKS cluster. Create an IAM role for your pods and modify the trust policy to allow your pod's service account to use the role. All new pod pods launched using this Service Account will be modified to use IAM for pods. Below is an example pod spec with the environment variables and volume fields added by the webhook. To ensure workloads are scheduled on windows nodes have the right environment variables, they must have a nodeSelector targeting windows it must run on.
Features
- Usage with non-root container user
- pod-identity-webhook ConfigMap
- Container images for amazon-eks-pod-identity-webhook can be found on Docker Hub
- Modify your pod's service account to be annotated with the ARN of the role you want the pod to use
- This webhook is for mutating pods that will require AWS IAM access
- Create an OIDC provider in IAM for your cluster
Programming Language
Go
Categories
This is an application that can also be fetched from https://sourceforge.net/projects/amazon-eks-pod-id-whook.mirror/. It has been hosted in OnWorks in order to be run online in an easiest way from one of our free Operative Systems.