This repository provides two components:
- Helm Chart for AWS Pod Identity Webhook in Workload Clusters.
- Installs the the amazon-eks-pod-identity-webhook.
This webhook is for mutating pods that will require AWS IAM access.
- Custom golang binary that runs as a cronjob
This is used to restart pods that weren't catched by the webhook (because they started before the webhook).
Managed by the Giant Swarm App Platform.
- All configuration options are documented in the values.yaml file.
See the amazon-eks-pod-identity-webhook walkthrough
To install the chart locally:
$ git clone https://github.com/giantswarm/aws-pod-identity-webhook.git
$ cd aws-pod-identity-webhook
$ helm install helm/aws-pod-identity-webhook
Provide a custom values.yaml
:
$ helm install aws-pod-identity-webhook -f values.yaml