provider-aws icon indicating copy to clipboard operation
provider-aws copied to clipboard

Support eks pod identity association

Open brandocomando opened this issue 1 year ago • 7 comments
trafficstars

What resource do you need?

Aws recently announced eks pod identities. I'd like to use it via crossplane. https://docs.aws.amazon.com/eks/latest/userguide/pod-id-association.html

Specifically what is missing is the equivalent of this aws CLI command aws eks create-pod-identity-association --cluster-name my-cluster --role-arn arn:aws:iam::111122223333:role/my-role --namespace default --service-account my-service-account

What is your use case?

Instead of linking service accounts to iam roles via oidc configuration I'd like to use pod identity

Would you be willing to contribute it using code generator

I'll take a look.

brandocomando avatar Dec 12 '23 13:12 brandocomando

In addition, it would be great to support pod identities as an authentication method in ProviderConfig

Edit: I made a separate issue for this: #1981

jmalloc avatar Dec 26 '23 22:12 jmalloc

Crossplane does not currently have enough maintainers to address every issue and pull request. This issue has been automatically marked as stale because it has had no activity in the last 90 days. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.

github-actions[bot] avatar Mar 26 '24 01:03 github-actions[bot]

/fresh

This is also important to us as well. This is pretty much the only reason we are not using crossplane right now.

wesleyorama2 avatar Mar 26 '24 17:03 wesleyorama2

Crossplane does not currently have enough maintainers to address every issue and pull request. This issue has been automatically marked as stale because it has had no activity in the last 90 days. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.

github-actions[bot] avatar Jun 25 '24 02:06 github-actions[bot]

/fresh would love to have this feature

fhochleitner avatar Jul 03 '24 14:07 fhochleitner

/fresh

Would be nice

jmerciercode avatar Aug 08 '24 08:08 jmerciercode

Hey, folks, quick update on the status of this issue:

Since this provider is kind of in maintenance mode and we don't have the time to provide full support we (as maintainers) are not going to implement this and other features on our own. However, we do accept pull requests to include new features into the provider. So feel free to start working on it and assign one of us as reviewer.

MisterMX avatar Aug 14 '24 10:08 MisterMX