Merge pull request #557 from krrrr38/cluster-secret-store-irsa-setting-example

add ClusterSecretStore AWS IRSA example setting docs

docs/snippets/full-cluster-secret-store.yaml

@@ -22,9 +22,9 @@ spec:
       role: iam-role
       # AWS Region to be used for the provider
       region: eu-central-1
-      # Auth defines the information necessary to authenticate against AWS by
-      # getting the accessKeyID and secretAccessKey from an already created Kubernetes Secret
+      # Auth defines the information necessary to authenticate against AWS
       auth:
+        # Getting the accessKeyID and secretAccessKey from an already created Kubernetes Secret
         secretRef:
           accessKeyID:
             name: awssm-secret
@@ -32,6 +32,12 @@ spec:
           secretAccessKey:
             name: awssm-secret
             key: secret-access-key
+        # IAM roles for service accounts
+        # https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html
+        jwt:
+          serviceAccountRef:
+            name: my-serviceaccount
+            namespace: sa-namespace
 
     vault:
       server: "https://vault.acme.org"