aws-iam-authenticator

aws-iam-authenticator copied to clipboard

I want run this server on non-ec2 environment(ex: Azure VM) for users can login with AWS IAM identity. But seems it requires EC2 IMDS apiserver. Is there any option run...

uanid

- Upgrade go version to go1.19 - Upgrade k8s.io dependencies to v0.25.0 ``` go mod edit -go=1.19 go get k8s.io/api@latest go get k8s.io/apimachinery@latest go get k8s.io/client-go@latest go get k8s.io/code-generator@latest go...

nilesh-akhade

k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.22.0 k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.22.0 k8s.io/sample-controller => k8s.io/sample-controller v0.22.0 k8s.io.client-go => k8s.io/client-go v0.20.0 k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.22.0 https://github.com/kubernetes-sigs/aws-iam-authenticator/blob/master/go.mod#L54 I think the line should be `k8s.io/client-go => k8s.io/client-go...

nilesh-akhade

https://github.com/kubernetes-sigs/aws-iam-authenticator/blob/6da4c44ca4aa1c83dbc0820c5413312606dc09f3/pkg/token/token.go#L332 The intention seems to be passing 60 sec but current implementation is effectively passing 60 nanosec. So `requestPresignParam * time.Second` might be correct.

roengram

add support for e2e latency for dynamic mode

8

**What this PR does / why we need it**: This adds logic to support e2e latency for dynamic mode and dynamic backend mode files. **Which issue(s) this PR fixes** *(optional,...

minj131

reduce token expiration if credentials will expire

7

**What this PR does / why we need it**: An issue comes up when using a long-lived `token.Generator` instance where the underlying assume-role session expires, which invalidates the token. This...

iamnoah

[Feature request]:

4

### What would you like to be added? Use the aws-iam-authenticator CLI to delete a role from the aws-auth configmap. For ex, `aws-iam-authenticator delete role ...` ### Why is this...

jebbens

Use update-codegen instead of make generated_files

3

**What this PR does / why we need it**: `make generated_files` is deprecated, use `./hack/update-codegen.sh` instead.

nckturner

[Bug]: Fix to #606 not available in released version, eksctl quickstart instructions doesn't work with new style SSO config

1

### What happened? I just wanted to bring attention to the fact that the currently released versions of `aws-iam-authenticator` fails to provide authentication to users that have set up authentication...

nresare

feat: add support for EC2 Instance Identity roles

8

**What this PR does / why we need it**: This PR enables aws-iam-authenticator to support EC2 Instance Identity roles - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-identity-roles.html , by parsing their UserID format. This enables use...

gilbahat