Open vumdao opened 2 months ago
+1 also interested in migrating to access entries.
Note: Half of the work to do this seems to have been done already :)
The "AuthenticationMode" half looks done: (as of EKS Blueprints version 1.15.1)
import * as blueprints from '@aws-quickstart/eks-blueprints';
// blueprints as in blueprint_of_eks_declarative_cf_stack
import { AuthenticationMode } from 'aws-cdk-lib/aws-eks';
const baselineClusterProvider = new blueprints.GenericClusterProvider({
tags: baselineEKSTags,
outputConfigCommand: true,
authenticationMode: AuthenticationMode.API_AND_CONFIG_MAP,
...
The "AccessConfig" 2nd half, looks to be WIP: My understanding is that it currently AccessConfig doesn't exist as a well integrated turn key solution in eks-blueprints, (based on https://aws-quickstart.github.io/cdk-eks-blueprints/api/interfaces/clusters.GenericClusterProviderProps.html)
That said, it looks like a workaround method should exist here:
https://github.com/aws/aws-cdk/pull/30016
(I haven't figured out how to make it work yet / it might not be available on a released / stable branch of the project)
Actually, this whole feature seems to be available in eks-cdk-blueprints v1.15.1, :) just not yet documented. (wait technically it doesn't exist in Cluster construct, but it seems to be available via a different construct/methodology.)
I'm also interested in this existing
Describe the feature
Provide option for Amazon EKS access management controls.
The
AuthenticationMode
supportsCONFIG_MAP
, which is the default,API_AND_CONFIG_MAP
andCONFIG_MAP
. It allows users to switch the mode on cluster creation or update. When the mode has API support, users have to define the AccessEntry to map the access policies and the IAM principalsFurthermore, provide option to support create
AccessEntry
eitherRef: https://github.com/aws/aws-cdk/pull/30016
Use Case
Provide option for selecting
AuthenticationMode
and createAccessEntry
Proposed Solution
No response
Other Information
No response
Acknowledgements
CDK version used
2.147.0
EKS Blueprints Version
1.14.1
Node.js Version
v22.1.0
Environment details (OS name and version, etc.)
macOS Sonoma 14.5