Skip to content

Commit

Permalink
Update README to clarify permissions required for self-hosted Kuberne…
Browse files Browse the repository at this point in the history
…tes and EKS
  • Loading branch information
kkb0318 committed Aug 12, 2024
1 parent d445178 commit da98b3c
Showing 1 changed file with 33 additions and 1 deletion.
34 changes: 33 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,11 @@ Before you begin, ensure you have the following:
- A running Kubernetes cluster.
- Helm installed on your local machine.
- AWS user credentials with appropriate permissions.
- The permissions should allow irsa-manager to call the necessary AWS APIs. You can find all the APIs that irsa-manager calls in the internal/aws/aws.go interfaces.

- The permissions should allow irsa-manager to call the necessary AWS APIs. The following outlines the required permissions for self-hosted Kubernetes and EKS environments.

<details>
<summary>for self-hosted</summary>

```json
{
Expand All @@ -48,6 +52,34 @@ Before you begin, ensure you have the following:
}
```

</details>

<details>
<summary>for EKS</summary>

```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"iam:CreateRole",
"iam:UpdateAssumeRolePolicy",
"iam:AttachRolePolicy",
"iam:DeleteRole",
"iam:DetachRolePolicy",
"iam:ListAttachedRolePolicies",
"sts:GetCallerIdentity"
],
"Resource": "*"
}
]
}
```

</details>

## Setup

Follow these steps to set up IRSA on your cluster:
Expand Down

0 comments on commit da98b3c

Please sign in to comment.