You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/reference/modules/terraform-aws-eks/eks-alb-ingress-controller-iam-policy/eks-alb-ingress-controller-iam-policy.md
+10-10
Original file line number
Diff line number
Diff line change
@@ -9,11 +9,11 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
9
9
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
10
10
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-alb-ingress-controller-iam-policy"className="link-button"title="View the source code for this module in GitHub.">View Source</a>
16
+
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-alb-ingress-controller-iam-policy"className="link-button"title="View the source code for this module in GitHub.">View Source</a>
17
17
18
18
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.73.2"className="link-button"title="Release notes for only versions which impacted this module.">Release Notes</a>
19
19
@@ -23,14 +23,14 @@ defines the minimal set of permissions necessary for the [AWS ALB Ingress
23
23
Controller](https://github.com/kubernetes-sigs/aws-alb-ingress-controller). This policy can then be attached to EC2
24
24
instances or IAM roles so that the controller deployed has enough permissions to manage an ALB.
25
25
26
-
See [the eks-alb-ingress-controller module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-alb-ingress-controller) for a module that deploys the Ingress
26
+
See [the eks-alb-ingress-controller module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-alb-ingress-controller) for a module that deploys the Ingress
27
27
Controller on to your EKS cluster.
28
28
29
29
## Attaching IAM policy to workers
30
30
31
31
To allow the ALB Ingress Controller to manage ALBs, it needs IAM permissions to use the AWS API to manage ALBs.
32
32
Currently, the way to grant Pods IAM privileges is to use the worker IAM profiles provisioned by [the
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-alb-ingress-controller"className="link-button"title="View the source code for this module in GitHub.">View Source</a>
16
+
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-alb-ingress-controller"className="link-button"title="View the source code for this module in GitHub.">View Source</a>
17
17
18
-
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.73.2"className="link-button"title="Release notes for only versions which impacted this module.">Release Notes</a>
18
+
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.74.1"className="link-button"title="Release notes for only versions which impacted this module.">Release Notes</a>
19
19
20
20
This Terraform Module installs and configures the [AWS ALB Ingress
21
21
Controller](https://github.com/kubernetes-sigs/aws-alb-ingress-controller) on an EKS cluster, so that you can configure
@@ -110,7 +110,7 @@ correctly.
110
110
111
111
You can use the `alb.ingress.kubernetes.io/subnets` annotation on `Ingress` resources to specify which subnets the controller should configure the ALB for.
112
112
113
-
You can also omit the `alb.ingress.kubernetes.io/subnets` annotation, and the controller will [automatically discover subnets](https://kubernetes-sigs.github.io/aws-alb-ingress-controller/guide/controller/config/#subnet-auto-discovery) based on their tags. This method should work "out of the box", so long as you are using the [`eks-vpc-tags`](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-vpc-tags) module to tag your VPC subnets.
113
+
You can also omit the `alb.ingress.kubernetes.io/subnets` annotation, and the controller will [automatically discover subnets](https://kubernetes-sigs.github.io/aws-alb-ingress-controller/guide/controller/config/#subnet-auto-discovery) based on their tags. This method should work "out of the box", so long as you are using the [`eks-vpc-tags`](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-vpc-tags) module to tag your VPC subnets.
114
114
115
115
### Security Groups
116
116
@@ -125,7 +125,7 @@ nodes.
125
125
### IAM permissions
126
126
127
127
The container deployed in this module requires IAM permissions to manage ALB resources. See [the
128
-
eks-alb-ingress-controller-iam-policy module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-alb-ingress-controller-iam-policy) for more information.
128
+
eks-alb-ingress-controller-iam-policy module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-alb-ingress-controller-iam-policy) for more information.
129
129
130
130
## Using the Ingress Controller
131
131
@@ -200,7 +200,7 @@ nature of the controller in provisioning the ALBs.
200
200
The AWS ALB Ingress Controller has first class support for
201
201
[external-dns](https://github.com/kubernetes-incubator/external-dns), a third party tool that configures external DNS
202
202
providers with domains to route to `Services` and `Ingresses` in Kubernetes. See our [eks-k8s-external-dns
203
-
module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-k8s-external-dns) for more information on how to setup the tool.
203
+
module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-k8s-external-dns) for more information on how to setup the tool.
204
204
205
205
## How do I deploy the Pods to Fargate?
206
206
@@ -234,7 +234,7 @@ instances under the hood, and thus the ALB can not be configured to route by ins
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-aws-auth-merger"className="link-button"title="View the source code for this module in GitHub.">View Source</a>
16
+
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-aws-auth-merger"className="link-button"title="View the source code for this module in GitHub.">View Source</a>
17
17
18
18
<ahref="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.72.5"className="link-button"title="Release notes for only versions which impacted this module.">Release Notes</a>
19
19
@@ -35,29 +35,29 @@ This repo is a part of [the Gruntwork Infrastructure as Code Library](https://gr
35
35
36
36
### Core concepts
37
37
38
-
**[What is Kubernetes RBAC?](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-k8s-role-mapping/README.md#what-is-kubernetes-role-based-access-control-rbac)*: overview of Kubernetes RBAC, the underlying system managing authentication and authorization in Kubernetes.
38
+
**[What is Kubernetes RBAC?](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-k8s-role-mapping/README.md#what-is-kubernetes-role-based-access-control-rbac)*: overview of Kubernetes RBAC, the underlying system managing authentication and authorization in Kubernetes.
39
39
40
-
**[What is AWS IAM role?](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-k8s-role-mapping/README.md#what-is-aws-iam-role)*: overview of AWS IAM Roles, the underlying system managing authentication and authorization in AWS.
40
+
**[What is AWS IAM role?](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-k8s-role-mapping/README.md#what-is-aws-iam-role)*: overview of AWS IAM Roles, the underlying system managing authentication and authorization in AWS.
41
41
42
42
**[Managing users or IAM roles for your cluster](https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html)*: The official AWS docs on how the `aws-auth` Kubernetes `ConfigMap` works.
43
43
44
-
**[What is the aws-auth-merger?](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-aws-auth-merger/core-concepts.md#what-is-the-aws-auth-merger)*: overview of the `aws-auth-merger` and how it works to manage the `aws-auth` Kubernetes `ConfigMap`.
44
+
**[What is the aws-auth-merger?](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-aws-auth-merger/core-concepts.md#what-is-the-aws-auth-merger)*: overview of the `aws-auth-merger` and how it works to manage the `aws-auth` Kubernetes `ConfigMap`.
45
45
46
46
### Repo organization
47
47
48
-
*[modules](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules): the main implementation code for this repo, broken down into multiple standalone, orthogonal submodules.
48
+
*[modules](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules): the main implementation code for this repo, broken down into multiple standalone, orthogonal submodules.
49
49
50
-
*[examples](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/examples): This folder contains working examples of how to use the submodules.
50
+
*[examples](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/examples): This folder contains working examples of how to use the submodules.
51
51
52
-
*[test](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/test): Automated tests for the modules and examples.
52
+
*[test](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/test): Automated tests for the modules and examples.
53
53
54
54
## Deploy
55
55
56
56
### Non-production deployment (quick start for learning)
57
57
58
58
If you just want to try this repo out for experimenting and learning, check out the following resources:
59
59
60
-
*[examples folder](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/examples): The `examples` folder contains sample code optimized for learning, experimenting, and testing (but not production usage).
60
+
*[examples folder](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/examples): The `examples` folder contains sample code optimized for learning, experimenting, and testing (but not production usage).
61
61
62
62
### Production deployment
63
63
@@ -69,15 +69,15 @@ If you want to deploy this repo in production, check out the following resources
69
69
70
70
## Manage
71
71
72
-
*[How to deploy and use the aws-auth-merger](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-aws-auth-merger/core-concepts.md#how-do-i-use-the-aws-auth-merger)
72
+
*[How to deploy and use the aws-auth-merger](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-aws-auth-merger/core-concepts.md#how-do-i-use-the-aws-auth-merger)
73
73
74
-
*[How to handle conflicts with automatic updates to the aws-auth ConfigMap by EKS](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-aws-auth-merger/core-concepts.md#how-do-i-handle-conflicts-with-automatic-updates-by-eks)
74
+
*[How to handle conflicts with automatic updates to the aws-auth ConfigMap by EKS](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-aws-auth-merger/core-concepts.md#how-do-i-handle-conflicts-with-automatic-updates-by-eks)
75
75
76
-
*[How to restrict users to specific actions on the EKS cluster](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-k8s-role-mapping/README.md#restricting-specific-actions)
76
+
*[How to restrict users to specific actions on the EKS cluster](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-k8s-role-mapping/README.md#restricting-specific-actions)
77
77
78
-
*[How to restrict users to specific namespaces on the EKS cluster](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/modules/eks-k8s-role-mapping/README.md#restricting-by-namespace)
78
+
*[How to restrict users to specific namespaces on the EKS cluster](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/modules/eks-k8s-role-mapping/README.md#restricting-by-namespace)
79
79
80
-
*[How to authenticate kubectl to EKS](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.73.3/core-concepts.md#how-to-authenticate-kubectl)
80
+
*[How to authenticate kubectl to EKS](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.74.2/core-concepts.md#how-to-authenticate-kubectl)
81
81
82
82
## Sample Usage
83
83
@@ -92,7 +92,7 @@ If you want to deploy this repo in production, check out the following resources
0 commit comments