search

crossplane-contrib / provider-upjet-aws

Official AWS Provider for Crossplane by Upbound.
https://marketplace.upbound.io/providers/upbound/provider-aws
Apache License 2.0
137 stars 113 forks source link

Support Pod Identity Controller associations for provider IAM permissions #1249

Open danielloader opened 3 months ago

danielloader commented 3 months ago

What problem are you facing?

I’d like to utilise pod identity controller associations to give my AWS providers the correct IAM privileges, instead of IRSA.

How could Official AWS Provider help solve your problem?

I’m not sure if it’s possible or not as the documentation doesn’t seem to indicate it is, if it is I’d love to see a sample ProviderConfig object for this authentication and authorisation mechanism.

agjmills commented 3 months ago

👍 for this. - of the supported values are below, None makes the most sense as it should fall back on AWS_CONTAINER_CREDENTIALS_FULL_URI and AWS_CONTAINER_AUTHORIZATION_TOKEN from the SDK, I think?

The ProviderConfig "aws-provider" is invalid: spec.credentials.source: Unsupported value: "yeet": supported values: "None", "Secret", "IRSA", "WebIdentity", "Upbound"
haarchri commented 3 months ago

Please Check #1254