quickstarts
quickstarts copied to clipboard
Support for IRSA for AWS Components Specs
Describe the feature
Team -
I currently see that component specs with AWS integrations dont have support IRSA (IAM Roles for Service Account), rather we are expected to plug in the secret and access keys as part of the deployment for example like below and this basically increases the blast radius and also exposes keys to operator of the EKS Cluster. Appreciate if you can provide support for IRSA with all AWS Components implementation.
apiVersion: dapr.io/v1alpha1
kind: Component
metadata:
name: statestore
spec:
type: state.aws.dynamodb
version: v1
metadata:
- name: table
value: "Orders"
- name: accessKey
secretKeyRef:
name: statestore-secrets
key: accessKey
- name: secretKey
secretKeyRef:
name: statestore-secrets
key: secretKey
- name: region
secretKeyRef:
name: statestore-secrets
key: region
- name: partitionKey
value: "orderId"