This message was deleted.

sparse-intern-71089

02/05/2021, 7:21 PM

This message was deleted.

prehistoric-kite-30979

02/05/2021, 7:22 PM

I have a working example in go but it requires I have access to the arn and URL of the oidcprovider.

prehistoric-kite-30979

02/05/2021, 7:24 PM

The pulumi link in those docs appears to be broken.

billowy-army-68599

02/05/2021, 7:24 PM

which language?

prehistoric-kite-30979

02/05/2021, 7:25 PM

trying to do it in ts using the eks extension

billowy-army-68599

02/05/2021, 7:28 PM

the eks package exports a couple of properties

Copy code

export const oidcProviderArn = cluster.core.oidcProvider.arn
export const oidcProviderUrl = cluster.core.oidcProvider.url

billowy-army-68599

02/05/2021, 7:28 PM

here's a helper function you can pass that to https://gist.github.com/jaxxstorm/59d378cccca36faf49f6ac2dda86f603

prehistoric-kite-30979

02/05/2021, 7:28 PM

thanks I'll give that a go in a bit

billowy-army-68599

02/05/2021, 7:29 PM

and you'd use like this

Copy code

const role = rbac.CreateServiceAccountIAMRole("foo",
    namespaceName,
    oidcProviderArn,
    oidcProviderUrl,
);

billowy-army-68599

02/05/2021, 7:29 PM

the key point is that IAM roles take a standard string, and the oidc exports are outputs, so you need to build the role inside an

apply

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.