Move from IRSA to Pod Identity with the Vault Provider IAM Auth does not work #4888
Description
with the below clustersecretstore config , we get error
error:
cluster-secret-store expected env variable: AWS_WEB_IDENTITY_TOKEN_FILE not found on controller's pod
this is because with pod identity, controller pod will have env AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE and AWS_CONTAINER_CREDENTIALS_FULL_URI
clustersecretscore config:
kind: ClusterSecretStore
metadata:
name: vault-backend
spec:
provider:
vault:
auth:
iam:
path: vaultauthpath
region: <region>
role: arn:aws:iam::<account>:role/<role>
vaultAwsIamServerID: serverid
vaultRole: vaultrole
path: vaultpath
server: https://vault-server-address
Metadata
Metadata
Assignees
Labels
Type
Projects
Status