From 724b6f790303aa45093982c550388a8d04a94d45 Mon Sep 17 00:00:00 2001 From: joshvanl Date: Fri, 29 Aug 2025 12:51:49 -0300 Subject: [PATCH 1/2] [1.16] Adds docs for EKS IRSA Fixes https://github.com/dapr/docs/issues/4779 Signed-off-by: joshvanl --- .../hosting/kubernetes/cluster/setup-eks.md | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md b/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md index 6cff6e58031..5e9a25c10a8 100644 --- a/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md +++ b/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md @@ -113,6 +113,27 @@ You should see the following response: ✅ Success! Dapr has been installed to namespace dapr-system. To verify, run `dapr status -k' in your terminal. To get started, go here: https://docs.dapr.io/getting-started ``` +## IAM Roles for Service Accounts (IRSA) + +You can attach custom annotations to the ServiceAccounts created by the `dapr_rbac` Helm subchart—useful for enabling IAM Roles for Service Accounts (IRSA) on AWS EKS. +This enables fine-grained, secure access control for Dapr components using EKS’s IRSA mechanism. +Update your Dapr Helm values files to include the following necessary annotations for the ServiceAccounts. + +```yaml +serviceAccount: + operator: + annotations: + eks.amazonaws.com/role-arn: arn:aws:iam:::role/operator-role + injector: + annotations: {} + placement: + annotations: {} + scheduler: + annotations: {} + sentry: + annotations: {} +```` + ## Troubleshooting ### Access permissions From d0fd0b72df38f8f91769f01ba7d80f7c965412bc Mon Sep 17 00:00:00 2001 From: joshvanl Date: Fri, 5 Sep 2025 21:08:32 -0300 Subject: [PATCH 2/2] Adds ref to AWS auth page Signed-off-by: joshvanl --- .../en/operations/hosting/kubernetes/cluster/setup-eks.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md b/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md index 5e9a25c10a8..b70929ce35e 100644 --- a/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md +++ b/daprdocs/content/en/operations/hosting/kubernetes/cluster/setup-eks.md @@ -119,6 +119,8 @@ You can attach custom annotations to the ServiceAccounts created by the `dapr_rb This enables fine-grained, secure access control for Dapr components using EKS’s IRSA mechanism. Update your Dapr Helm values files to include the following necessary annotations for the ServiceAccounts. +See [here]({{% ref authenticating-aws.md %}}) for more information on AWS authentication. + ```yaml serviceAccount: operator: