iam

Documentation

Index

• Constants
• func ControlPlaneTrustRelationship(enableFargate bool) *apiiam.PolicyDocument
• func FargateTrustRelationship() *apiiam.PolicyDocument
• func NodegroupTrustRelationship() *apiiam.PolicyDocument
• func RoleTags(key string, additionalTags infrav1.Tags) []*iam.Tag
• type IAMService
  • func (s *IAMService) CreateOIDCProvider(cluster *eks.Cluster) (string, error)
  • func (s *IAMService) CreateRole(roleName string, key string, trustRelationship *apiiam.PolicyDocument, ...) (*iam.Role, error)
  • func (s *IAMService) DeleteOIDCProvider(arn *string) error
  • func (s *IAMService) DeleteRole(name string) error
  • func (s *IAMService) EnsurePoliciesAttached(role *iam.Role, policies []*string) (bool, error)
  • func (s *IAMService) EnsureTagsAndPolicy(role *iam.Role, key string, trustRelationship *apiiam.PolicyDocument, ...) (bool, error)
  • func (s *IAMService) GetIAMRole(name string) (*iam.Role, error)
  • func (s *IAMService) IsUnmanaged(role *iam.Role, key string) bool

Constants

const (
	// EKSFargateService is the service to trust for fargate pod execution roles
	EKSFargateService = "eks-fargate-pods.amazonaws.com"
)

Functions

func ControlPlaneTrustRelationship

func ControlPlaneTrustRelationship(enableFargate bool) *apiiam.PolicyDocument

func FargateTrustRelationship

func FargateTrustRelationship() *apiiam.PolicyDocument

func NodegroupTrustRelationship

func NodegroupTrustRelationship() *apiiam.PolicyDocument

func RoleTags

func RoleTags(key string, additionalTags infrav1.Tags) []*iam.Tag

Types

type IAMService

type IAMService struct {
	logr.Logger
	IAMClient iamiface.IAMAPI
}

func (*IAMService) CreateOIDCProvider

func (s *IAMService) CreateOIDCProvider(cluster *eks.Cluster) (string, error)

func (*IAMService) CreateRole

func (s *IAMService) CreateRole(
	roleName string,
	key string,
	trustRelationship *apiiam.PolicyDocument,
	additionalTags infrav1.Tags,
) (*iam.Role, error)

func (*IAMService) DeleteOIDCProvider

func (s *IAMService) DeleteOIDCProvider(arn *string) error

func (*IAMService) DeleteRole

func (s *IAMService) DeleteRole(name string) error

func (*IAMService) EnsurePoliciesAttached

func (s *IAMService) EnsurePoliciesAttached(role *iam.Role, policies []*string) (bool, error)

func (*IAMService) EnsureTagsAndPolicy

func (s *IAMService) EnsureTagsAndPolicy(
	role *iam.Role,
	key string,
	trustRelationship *apiiam.PolicyDocument,
	additionalTags infrav1.Tags,
) (bool, error)

func (*IAMService) GetIAMRole

func (s *IAMService) GetIAMRole(name string) (*iam.Role, error)

func (*IAMService) IsUnmanaged

func (s *IAMService) IsUnmanaged(role *iam.Role, key string) bool