aws-pod-identity-webhook

README

aws-pod-identity-webhook chart and custom extension

This repository provides two components:

1. Helm Chart for AWS Pod Identity Webhook in Workload Clusters.

• Installs the the amazon-eks-pod-identity-webhook.

This webhook is for mutating pods that will require AWS IAM access.

1. Custom golang binary that runs as a cronjob

This is used to restart pods that weren't catched by the webhook (because they started before the webhook).

Deployment

Managed by the Giant Swarm App Platform.

Configuration Options

• All configuration options are documented in the values.yaml file.

Usage

See the amazon-eks-pod-identity-webhook walkthrough

For developers

Installing the Chart

To install the chart locally:

$ git clone https://github.com/giantswarm/aws-pod-identity-webhook.git
$ cd aws-pod-identity-webhook
$ helm install helm/aws-pod-identity-webhook

Provide a custom values.yaml:

$ helm install aws-pod-identity-webhook -f values.yaml