Slackbot
03/10/2023, 3:51 PMJason Witkowski
03/10/2023, 3:52 PMJason Witkowski
03/10/2023, 3:52 PMJason Witkowski
03/10/2023, 3:58 PMapiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
annotations:
<http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>: 'arn:aws:iam::11111:role/druid-s3'
and the pod gets the appropriate env vars:
- name: AWS_STS_REGIONAL_ENDPOINTS
value: regional
- name: AWS_DEFAULT_REGION
value: us-west-2
- name: AWS_REGION
value: us-west-2
- name: AWS_ROLE_ARN
value: 'arn:aws:iam::11111:role/druid-s3'
- name: AWS_WEB_IDENTITY_TOKEN_FILE
value: /var/run/secrets/eks.amazonaws.com/serviceaccount/tokenJason Witkowski
03/10/2023, 4:49 PMGian Merlino
03/13/2023, 11:01 PM