Skip to content

Commit a5355b5

Browse files
JoshVanLmsfussell
andauthored
[1.16] Adds docs for EKS IRSA (#4845)
* [1.16] Adds docs for EKS IRSA Fixes #4779 Signed-off-by: joshvanl <[email protected]> * Adds ref to AWS auth page Signed-off-by: joshvanl <[email protected]> --------- Signed-off-by: joshvanl <[email protected]> Co-authored-by: Mark Fussell <[email protected]>
1 parent 2026f43 commit a5355b5

File tree

1 file changed

+23
-0
lines changed
  • daprdocs/content/en/operations/hosting/kubernetes/cluster

1 file changed

+23
-0
lines changed

daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,6 +113,29 @@ You should see the following response:
113113
✅ Success! Dapr has been installed to namespace dapr-system. To verify, run `dapr status -k' in your terminal. To get started, go here: https://docs.dapr.io/getting-started
114114
```
115115
116+
## IAM Roles for Service Accounts (IRSA)
117+
118+
You can attach custom annotations to the ServiceAccounts created by the `dapr_rbac` Helm subchart—useful for enabling IAM Roles for Service Accounts (IRSA) on AWS EKS.
119+
This enables fine-grained, secure access control for Dapr components using EKS’s IRSA mechanism.
120+
Update your Dapr Helm values files to include the following necessary annotations for the ServiceAccounts.
121+
122+
See [here]({{% ref authenticating-aws.md %}}) for more information on AWS authentication.
123+
124+
```yaml
125+
serviceAccount:
126+
operator:
127+
annotations:
128+
eks.amazonaws.com/role-arn: arn:aws:iam::<ACCOUNT_ID>:role/operator-role
129+
injector:
130+
annotations: {}
131+
placement:
132+
annotations: {}
133+
scheduler:
134+
annotations: {}
135+
sentry:
136+
annotations: {}
137+
````
138+
116139
## Troubleshooting
117140
118141
### Access permissions

0 commit comments

Comments
 (0)