Skip to content

Latest commit

 

History

History
25 lines (19 loc) · 1.39 KB

README.md

File metadata and controls

25 lines (19 loc) · 1.39 KB

aws-auth-operator

License Go Report Card

This operator helps to manage 'aws-auth' ConfigMap for AWS EKS.

The challenge with aws-auth ConfigMap this operator is trying to solve is manual effort to maintain the ConfigMap. The ConfigMap allows to let specific AWS IAM Roles and Users to use the EKS cluster, but both approaches are not ideal because:

  • Using MapRoles does not show which user was executing cluster actions in Kubernetes Audit logs
  • Using MapUsers resolves the Kubernetes Audit log issue, but there are no good tools to manage the users

This operator is supposed to solve these problems by providing a tool for automated IAM Group synchronization and aws-auth ConfigMap management.

See Documentation for Installation and Use information.

AWS IAM to EKS User Traceability

Read my blog article on IAM User Traceability in AWS EKS for more information on the use-cases.