Home / Companies / Octopus Deploy / Blog / Post Details
Content Deep Dive

How to assign an IAM role as an EKS Pod Identity for the Octopus Kubernetes worker

Blog post from Octopus Deploy

Post Details
Company
Date Published
Author
Shawn Sesna
Word Count
948
Language
English
Hacker News Points
-
Summary

The article by Shawn Sesna, published on January 20, 2025, explains how to assign IAM roles to Kubernetes worker pods in an AWS environment, specifically using Elastic Kubernetes Service (EKS). It describes two methods: using IAM roles for service accounts and employing the Amazon EKS Pod Identity Agent add-on. The first method involves configuring the OIDC provider for the EKS cluster, updating the IAM role with the necessary trust relationships, and annotating the Kubernetes service account. The second method requires configuring an IAM role, creating a Pod Identity Association, and installing the EKS Pod Identity Agent add-on to grant the IAM role to pods. The article emphasizes automating these processes using scripts and commands, enhancing security and efficiency in managing Kubernetes worker pods.