keikoproj / aws-auth

Manage the aws-auth config map for EKS Kubernetes clusters
Apache License 2.0
182 stars 26 forks source link

Consider adding a controller implementation #31

Open eytan-avisror opened 2 years ago

eytan-avisror commented 2 years ago

Considering we already have the logic to interact with the aws-auth configmap, we should consider adding a CRD to be able to interact with it natively in the cluster, e.g. have UserMapping & RoleMapping objects in-cluster.

This will give more immutability / declarative state to the auth configuration

ccfishk commented 2 years ago

Are you saying using controller reconciling for authentication information update ?

eytan-avisror commented 2 years ago

Controller for reconciling User or Role mapping for authentication. Basically what this project does, just in a declarative CR/CRD form

45cali commented 2 years ago

this would be a great thing. managing aws auth with crd's in a cicd pipeline would be nice.