Skip to content

Commit 724b6f7

Browse files
committed
[1.16] Adds docs for EKS IRSA
Fixes #4779 Signed-off-by: joshvanl <[email protected]>
1 parent fa61782 commit 724b6f7

File tree

1 file changed

+21
-0
lines changed
  • daprdocs/content/en/operations/hosting/kubernetes/cluster

1 file changed

+21
-0
lines changed

daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,6 +113,27 @@ You should see the following response:
113113
✅ Success! Dapr has been installed to namespace dapr-system. To verify, run `dapr status -k' in your terminal. To get started, go here: https://docs.dapr.io/getting-started
114114
```
115115
116+
## IAM Roles for Service Accounts (IRSA)
117+
118+
You can attach custom annotations to the ServiceAccounts created by the `dapr_rbac` Helm subchart—useful for enabling IAM Roles for Service Accounts (IRSA) on AWS EKS.
119+
This enables fine-grained, secure access control for Dapr components using EKS’s IRSA mechanism.
120+
Update your Dapr Helm values files to include the following necessary annotations for the ServiceAccounts.
121+
122+
```yaml
123+
serviceAccount:
124+
operator:
125+
annotations:
126+
eks.amazonaws.com/role-arn: arn:aws:iam::<ACCOUNT_ID>:role/operator-role
127+
injector:
128+
annotations: {}
129+
placement:
130+
annotations: {}
131+
scheduler:
132+
annotations: {}
133+
sentry:
134+
annotations: {}
135+
````
136+
116137
## Troubleshooting
117138
118139
### Access permissions

0 commit comments

Comments
 (0)