If I enable the OIDC provider detailed here

Question

If I enable the OIDC provider detailed here <https www pulumi com docs reference pkg nodejs pulumi eks ClusterOptions createOidcProvider> How do I then create a new iam role for a given service account

prehistoric-kite-30979 · Answer

I have a working example in go but it requires I have access to the arn and URL of the oidcprovider

prehistoric-kite-30979 · Answer

The pulumi link in those docs appears to be broken

billowy-army-68599 · Answer

which language

prehistoric-kite-30979 · Answer

trying to do it in ts using the eks extension

billowy-army-68599 · Answer

the eks package exports a couple of properties ```export const oidcProviderArn = cluster core oidcProvider arn export const oidcProviderUrl = cluster core oidcProvider url```

billowy-army-68599 · Answer

here s a helper function you can pass that to <https gist github com jaxxstorm 59d378cccca36faf49f6ac2dda86f603>

prehistoric-kite-30979 · Answer

thanks I ll give that a go in a bit

billowy-army-68599 · Answer

and you d use like this ```const role = rbac CreateServiceAccountIAMRole foo namespaceName oidcProviderArn oidcProviderUrl ```

billowy-army-68599 · Answer

the key point is that IAM roles take a standard string and the oidc exports are outputs so you need to build the role inside an `apply`