With the recent news from EKS, I'm wondering if Pulumi has support for the OIDC IdP in the

eks.Cluster

https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/

There is a small addition that will be needed in the upstream provider and will be pulled into

@pulumi/aws

once it's available - tracked in https://github.com/terraform-providers/terraform-provider-aws/issues/9995. At that point I believe it will be possible to configure this on top of existing

@pulumi/eks

- but we'll also look into whether it makes sense to update some of the default IAM mappings to take advantage of this.

👍

👍

just merged in TF: https://github.com/terraform-providers/terraform-provider-aws/pull/10006