deploy: 3b9bbfd1f6b8d9edd55b35027058b49a5a2531ea

api-clustersecretstore/index.html

@@ -947,9 +947,9 @@
       <span class="nt">role</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">iam-role</span>
       <span class="c1"># AWS Region to be used for the provider</span>
       <span class="nt">region</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">eu-central-1</span>
-      <span class="c1"># Auth defines the information necessary to authenticate against AWS by</span>
-      <span class="c1"># getting the accessKeyID and secretAccessKey from an already created Kubernetes Secret</span>
+      <span class="c1"># Auth defines the information necessary to authenticate against AWS</span>
       <span class="nt">auth</span><span class="p">:</span>
+        <span class="c1"># Getting the accessKeyID and secretAccessKey from an already created Kubernetes Secret</span>
         <span class="nt">secretRef</span><span class="p">:</span>
           <span class="nt">accessKeyID</span><span class="p">:</span>
             <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">awssm-secret</span>
@@ -957,6 +957,12 @@
           <span class="nt">secretAccessKey</span><span class="p">:</span>
             <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">awssm-secret</span>
             <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">secret-access-key</span>
+        <span class="c1"># IAM roles for service accounts</span>
+        <span class="c1"># https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html</span>
+        <span class="nt">jwt</span><span class="p">:</span>
+          <span class="nt">serviceAccountRef</span><span class="p">:</span>
+            <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">my-serviceaccount</span>
+            <span class="nt">namespace</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">sa-namespace</span>
 
     <span class="nt">vault</span><span class="p">:</span>
       <span class="nt">server</span><span class="p">:</span> <span class="s">&quot;https://vault.acme.org&quot;</span>

sitemap.xml

@@ -1,119 +1,119 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2021-12-27</lastmod>
+     <lastmod>2021-12-29</lastmod>
      <changefreq>daily</changefreq>
     </url>
 </urlset>

snippets/full-cluster-secret-store.yaml

@@ -22,9 +22,9 @@ spec:
       role: iam-role
       # AWS Region to be used for the provider
       region: eu-central-1
-      # Auth defines the information necessary to authenticate against AWS by
-      # getting the accessKeyID and secretAccessKey from an already created Kubernetes Secret
+      # Auth defines the information necessary to authenticate against AWS
       auth:
+        # Getting the accessKeyID and secretAccessKey from an already created Kubernetes Secret
         secretRef:
           accessKeyID:
             name: awssm-secret
@@ -32,6 +32,12 @@ spec:
           secretAccessKey:
             name: awssm-secret
             key: secret-access-key
+        # IAM roles for service accounts
+        # https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html
+        jwt:
+          serviceAccountRef:
+            name: my-serviceaccount
+            namespace: sa-namespace
 
     vault:
       server: "https://vault.acme.org"