This message was deleted.

sparse-intern-71089

11/11/2022, 1:28 AM

This message was deleted.

billowy-army-68599

11/11/2022, 4:15 PM

ultimately, you need to be authenticated to AWS to be able to speak to the AWS control plane. You can authenticate outside the kubeconfig with environment variables (like an access key and secret key) if you prefer

hallowed-horse-57635

11/11/2022, 6:08 PM

i understand that but how do we do this in automation API ? we don't want to hardcode the creds in the container....hope that makes sense..

billowy-army-68599

11/11/2022, 6:22 PM

automation API isn’t the problem here. You need to get creds into the container somehow..

billowy-army-68599

11/11/2022, 6:23 PM

here are all your options https://leebriggs.co.uk/blog/2022/09/05/authenticating-to-aws-the-right-way

hallowed-horse-57635

11/11/2022, 6:28 PM

may be i am not able to explain the need. We are able to define creds using AWS profiles, using get token etc BUT they are available container wide. (which we don't want). anyways , will do more research.

hallowed-horse-57635

11/11/2022, 6:28 PM

thanks

hallowed-horse-57635

11/15/2022, 12:57 PM

FYI for the solution - as this is not clearly documented anywhere, it took a while for us to try and make this work with Pulumi Automation API - The credentials (key/secrets) can be passed using the kubeconfig as listed below using the env block and the command uses the env parameters. (As AWS CLI doesnt allow to pass the access/secret directly on the CLI). we will now try to make this work using sts tokens and certificates next and avoid passing creds this way.---- users: - name: arnawseksus west 1xxxxx:cluster/eks-clu01a user: exec: apiVersion: client.authentication.k8s.io/v1beta1 args: - --region - us-west-1 - eks - get-token - --cluster-name - eks-clu01a command: aws env: - name: "AWS_ACCESS_KEY_ID" value: "XXXXXXXX" - name: "AWS_SECRET_ACCESS_KEY" value: "XXXXXXXXXXXXXX"

careful-fireman-64347

01/12/2024, 3:13 PM

Hi! I have the same problem. How did you manage to solve it without using aws keys?

572 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.