aws-iam-authenticator icon indicating copy to clipboard operation
aws-iam-authenticator copied to clipboard

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

Results 77 aws-iam-authenticator issues
Sort by recently updated
recently updated
newest added

In the Readme file, the second step to "Run the server" is not clear. Can you modify that to describe how to run the server?

kind/documentation
lifecycle/frozen

Hi. We have EKS - 1.20. We have one SSO role that is used by two different users: -`user1` - admin (me) -`user2` must have admin access only in specific...

Assuming I have the following role ARN: ``` arn:aws:iam::1234567890:role/iam-ss/some-path/actual-role-name ``` If I enter this under `mapRoles`, this will not be recognized. Instead I need to enter: ``` arn:aws:iam::1234567890:role/actual-role-name ```

lifecycle/frozen

Hey guys, I made a rather stupid mistake, but the outcome is kinda catastrophic :) If you use the same ARN twice, I guess the groups are not merged but...

kind/bug
lifecycle/frozen

Moving discussion from https://github.com/kubernetes-sigs/aws-iam-authenticator/pull/116#discussion_r292235959 to this issue.

lifecycle/frozen

This command will automatically take your existing `ConfigMap` with `mapUsers` and `mapRoles` and create CRDs for each resources.

lifecycle/frozen

fix the script to solve the permission denied issue when run `make start-dev`

cncf-cla: yes
needs-ok-to-test
size/XS

Some VPNs or networks block proxies or caches for golang package artifactories. Setting GOPROXy to `direct` so that the build works in all environments.

cncf-cla: yes
needs-ok-to-test
size/XS

Description: This PR introduces a new backend mode DYNAMICFILE and an according DYNAMICFILEPATH configurable option to authenticator. It will enable authenticator to load the identity and its mapping from a...

cncf-cla: yes
do-not-merge/work-in-progress
size/XL
ok-to-test

After switcing to aws-cli for authentication in my kubeconfig files, I have problems with our kubernetes audit logs. All audit logs do not include the username from the authenticated user,...