diff --git a/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md b/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md index 6cff6e58031..b70929ce35e 100644 --- a/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md +++ b/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md @@ -113,6 +113,29 @@ You should see the following response: ✅ Success! Dapr has been installed to namespace dapr-system. To verify, run `dapr status -k' in your terminal. To get started, go here: https://docs.dapr.io/getting-started ``` +## IAM Roles for Service Accounts (IRSA) + +You can attach custom annotations to the ServiceAccounts created by the `dapr_rbac` Helm subchart—useful for enabling IAM Roles for Service Accounts (IRSA) on AWS EKS. +This enables fine-grained, secure access control for Dapr components using EKS’s IRSA mechanism. +Update your Dapr Helm values files to include the following necessary annotations for the ServiceAccounts. + +See [here]({{% ref authenticating-aws.md %}}) for more information on AWS authentication. + +```yaml +serviceAccount: + operator: + annotations: + eks.amazonaws.com/role-arn: arn:aws:iam:::role/operator-role + injector: + annotations: {} + placement: + annotations: {} + scheduler: + annotations: {} + sentry: + annotations: {} +```` + ## Troubleshooting ### Access permissions