EKS - IAM Role for Service Account
In the context of the "Least Priviliege". How to use IRSA ( IAM Role for service accounts) with PEGA Platform hosted on EKS cluster?
IRSA: https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html Auth AWS: https://docs-previous.pega.com/security/85/configuring-amazon-web-services-authentication-profile Implemetation in code: https://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/auth/DefaultAWSCredentialsProviderChain.html I configured env in the same way as the other applications on my cluster using IRSA, but apparently PEGA does not look for the default aws credential string.
JP Morgan Chase
US
@DiegoP686did you get the solution for the above problem ? In our case, using the terraform module to create the AWS resources, so for the IAM role all the privileges are assigned and that is mapped to the EKS Cluster service account. Now your pod is configured to run with that Service Account name, which gives the underlying privileges to the pod.