Connecting IAM users with system users in EKS pods

0

Hello,

I need to connect each IAM user to their own system user in EKS pod.

I know that using the aws eks --region region update-kubeconfig --name cluster_name + kubectl exec --stdin --tty pod/test -- /bin/bash commands i can get the "terminal access" to the pod, hosted in AWS EKS.

But it always gives me root user, how i can define by which user i want to authenticate into the pod? And, is it possible to define which IAM users have access to which pods system users?

I know that it is possible to do what i need with system manager - session manager by using SSH keys or defining the user-name with Tag SSMSessionRunAs for EC2 instances, but does it work similar with the EKS?

Joann

1 Respuesta
1
Respuesta aceptada

Okay, found half solution - https://medium.com/@metturarun/manage-aws-eks-nodes-through-aws-systems-manager-9483317e2ff4, im a bit new to kubernetes stuff, but yeah, it is possible to use session manager to achieve exact what i need, that 1 IAM user would have its own system user in NODE , but now i need to find a way to get access from node to pod, which i suppose should be possible, will not accept my own answer for now, maybe someone has better solution.

respondido hace 2 años
profile picture
EXPERTO
revisado hace 2 meses
profile picture
INGENIERO DE SOPORTE
revisado hace 2 años
  • Okay, yes, after getting into the Node it is pretty easy to get into the pod, you just need to use `docker exec -it <container id> bash

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas