EKS Add User VS. Role: How to Add IAM User and IAM Role to AWS EKS Cluster?

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail]
👉 [UPDATED] AWS EKS Kubernetes Tutorial [NEW]: • AWS EKS Kubernetes Tut...
▬▬▬▬▬ Experience & Location 💼 ▬▬▬▬▬
► I’m a Senior Software Engineer at Juniper Networks (12+ years of experience)
► Located in San Francisco Bay Area, CA (US citizen)
▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
► LinkedIn: / anton-putra
► Twitter/X: / antonvputra
► GitHub: github.com/antonputra
► Email: [e-mail]
▬▬▬▬▬▬ Related videos 👨‍🏫 ▬▬▬▬▬▬
👉 [Playlist] Kubernetes Tutorials: • Kubernetes Tutorials
👉 [Playlist] Terraform Tutorials: • Terraform Tutorials fo...
👉 [Playlist] Network Tutorials: • Network Tutorials
👉 [Playlist] Apache Kafka Tutorials: • Apache Kafka Tutorials
👉 [Playlist] Performance Benchmarks: • Performance Benchmarks
👉 [Playlist] Database Tutorials: • Database Tutorials
🔴UPDATED🔴: How to Add IAM User and IAM Role to AWS EKS Cluster?- • How to Add IAM User an...
=========
⏱️TIMESTAMPS⏱️
0:00 Intro
0:40 Add an IAM user with read only access to EKS cluster
12:50 Add an IAM role with root access and assume this role by IAM user
=========
Source Code
🌏 - Instructions: antonputra.com/Kubernetes/add...
🖥️ - GitHub: github.com/antonputra/tutoria...
#EKS #Kubernetes #AWS

[@AntonPutra]

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail] 👉 [UPDATED] AWS EKS Kubernetes Tutorial [NEW]: kzbin.info/aero/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l&si=wc6LIC5V2tD-Tzwl

[@_lestina]

This is the best video i have seen on Terraform, well structured without missing a step. Thank you so much for this

[@AntonPutra]

Thank you!

[@pikachu3686]

simple very clear

[@AntonPutra]

thanks!

[@NightcoreHindi]

This is exactly what i was looking for. Thank you very much. Liked subscribed ✌️

[@AntonPutra]

Awesome, thank you!

[@burakyilmaz7566]

Thank you very much for the video, helped me a lot, I checked many videos related to this content, this one is the purest and best 👍🏻

[@AntonPutra]

Thanks!!

[@gouthampratapa4519]

Thanks, your tutorial helped alot in understanding the whole concept of accessing cluster. thanks again

[@AntonPutra]

You are welcome!

[@antheusferentzi8014]

Hi Anton, just wanted to say thank for this video!!!

[@AntonPutra]

Thanks Antheus!

[@hamnletrivera9796]

Thank you very much for sharing this video, very well and explained and easy to understand !!

[@AntonPutra]

Thank you Hamnlet!

[@maxx27i]

Great tutorial! Thank you so much!

[@AntonPutra]

You're very welcome!

[@akshaypandhare2214]

Awesome explanation. Really helped me to understand RBAC.

[@AntonPutra]

Great to hear!

[@zarankeng9301]

Thank you for this! Great tutorial.

[@AntonPutra]

Thanks Zara!

[@ericberg5286]

Thanks, Anton. BTW, It was AWS tech support that recommended this video.

[@AntonPutra]

Cool, thanks

[@shehryarabbasi5856]

Anton, you're doing a great job! Keep it up! = )

[@AntonPutra]

Thanks, will do!

[@leventyild]

Thanks for your tutorial. It was a very helpfull for me

[@AntonPutra]

Thanks for the support:)

[@alejandrobarquin6511]

Excellent, thank you sir.

[@AntonPutra]

Very welcome Alejandro

[@LalitYadav-eo4hv]

Awesome video, it helped cleared lot of confusion. Thanks for the video

[@AntonPutra]

Thanks Lalit!

[@LalitYadav-eo4hv]

@@AntonPutra i found 1 issue related to sts token, whenever i run terraform init i get this invalid client token, i created terraform user, added in to aws profile but couldn’t solve it, later i used sts get token and exported then it worked. I followed each steps defined in VPC video. If u can guid us will be very helpful

[@LalitYadav-eo4hv]

@@AntonPutra but I really liked all your videos and i refer your videos whenever i am stuck

[@SoumyaDassrd]

Thanks dude, it's nice and deep

[@AntonPutra]

Thank you too!

[@AntonPutra]

Playlist: kzbin.info/aero/PLiMWaCMwGJXkeBzos8QuUxiYT6j8JYGE5 ⏱️TIMESTAMPS⏱️ 0:00 Intro 0:40 Add an IAM user with read only access to EKS cluster 12:50 Add an IAM role with root access and assume this role by IAM user

[@valerikehayov2393]

Thanks for your tutorial. It's really nice job. If I may propose to you, maybe to create a little bit even more advanced video where you can use both VPC and EKS official Terraform modules. As they are very complex and hard to understand and widely used at the same time so it will be worth if someone roughly explains them. Also it will be nice to deploy all necessary resources for EKS to work in production for example: AWS Load balance controller, Autoscaler, Container insights. Keep up the great job, regards!

[@AntonPutra]

Thank you for the suggestions. I'll defiantly cover those components in the future.

[@AntonPutra]

By the way, EKS Cluster Auto Scaling - kzbin.info/www/bejne/najQlZWleJJ1qqc and horizontal pod autoscaler video will go out on Wednesday.

[@valerikehayov2393]

@@AntonPutra Wow, great, it's so important for the whole setup. Thanks man!

[@George-mk7lp]

thank you

[@AntonPutra]

Welcome!

[@nada3857]

Gostei, conteúdo completo.

[@AntonPutra]

Thanks!

[@palanisamy-dl9qe]

Hi buddy i watched your all the videos related to terraform EKS session it was excellent way of explanation. could you please upload the video terraform cluster auto scaling (worker node creation and deletion ) based on the workload traffic?

[@AntonPutra]

Will upload soon, thanks

[@AntonPutra]

👉 How to Manage Secrets in Terraform - kzbin.info/www/bejne/aX-TpXqBrNt1mqM 👉 Terraform Tips & Tricks - kzbin.info/www/bejne/bYScZaKLid5lsJY 👉 ArgoCD Tutorial - kzbin.info/www/bejne/sHjRlZqafMZkisU

[@michaellopez2191]

Anton, great video! I have a question for federated users. We authenticate through Okta at my job in which we're attached into 1 of 2 IAM roles. We are staying away from using IAM groups. How can a federated user be attached to the bindings in that case? I can contact you elsewhere if the question needs more details. Thanks again for the video!

[@AntonPutra]

Thank you for the question, it's a common use case to use federated users and especially okta. I will try to create a video about this topic soon!

[@michaellopez2191]

@@AntonPutra that would be amazing. I figured a decent portion of it out but it doesn't seem to like showing me pod/logs. Hopefully you're video can straighten out some of the issues I'm having!

[@jono5658]

Hi Anton, thank you for these great videos. May I please ask why you had to create policy (AmazonEKSDeveloperPolicy) and also create the cluster role? It seems to me that it is the same thing or are they different permissions altogether. Thank-you.

[@AntonPutra]

IAM role on its own does not grant any permissions to the subject it's like a container, you need to create IAM policy where you would provide access to some resources and attach it to the role, or you can use AWS managed role with predefined permissions.

[@jono5658]

@@AntonPutra Thank-you.

[@davidvacca4295]

Hi if the task is to Create Secure User in Kubernetes and Map to IAM role, I have to use map roles or mapuser?

[@AntonPutra]

You should "Create Secure User" in k8s and map to aws iam role

[@davidvacca4295]

@@AntonPutra how can I create an user?

[@amitmandrupkar6842]

Antona Great video it helped me lot. have one question . can we add user grop aws-auth file instade of single user ?

[@AntonPutra]

No, instead of group you can only add IAM role only

[@opeomotayo7113]

Hi Anton, Great tutorial, I have subscribed and liked your videos, just wondering if you are able to update the video to create the roles, policies in terraform code please instead of manually, ideally one for manager/admin group and the other for reader group to assume manager and reader role accordingly, may be adding one/two users to each group for testing purpose. I have tried this, but I don't quite understand how to write this with terraform.

[@AntonPutra]

Thanks for the question, I will create a video soon.

[@AntonPutra]

🟢 [New] Terragrunt Tutorial: Create VPC, EKS from Scratch! (Step-by-Step) - kzbin.info/www/bejne/r5XYeZSFn5iLg8k

[@mvjrao123]

Thanks Anton. It's very useful to me. quick question...where did you create kubernetes group called "reader"?

[@AntonPutra]

Not quite sure if I understand your question correctly, "reader" k8s group is a part of the Kubernetes rRole-based access control mechanism (RBAC) created in Kubernetes itself using yaml definition similar to deployment object. github.com/antonputra/tutorials/blob/main/lessons/038/k8s/rbac.yaml#L5

[@mvjrao123]

Thanks @@AntonPutra for your response. This file has ClusterRole and ClusterRoleBinding. Don't we need to create a group called 'reader' explicitly?

[@luisrodriguezgarcia1282]

Hi Anton! Great job with this tutorial... keep it up! Just one thing... I can't find the JSON code for the policies in your GitLab repo. thanks in advance!

[@luisrodriguezgarcia1282]

GitHub not GitLab :)

[@AntonPutra]

Thank you, I forgot to add it to github, but you can grab it from here - antonputra.com/eks-add-user-vs-role/

[@itaihuber]

@@AntonPutra hi, the link is no longer available, can i grab the policy json from anywhere else?

[@AntonPutra]

@@itaihuber Here github.com/antonputra/tutorials/tree/main/lessons/038?

[@AntonPutra]

🔴UPDATED🔴: How to Add IAM User and IAM Role to AWS EKS Cluster?- kzbin.info/www/bejne/e3jHf2Vne5d9nNk

[@AntonPutra]

Available on January 3

[@ayushsinghrathore7186]

Hey Anton! Thanks for the great video. One doubt I have here is we can see that you have update the kubeconfig using eks-admin profile and then we are able to do the stuffs. How to verify that an IAM user who is able to assume this role can perform the actions inside the cluster? We are just doing all the operations using eks-admin role which already has system:masters permission at the cluster level and hence we are getting response as yes. Its a bit confusing. Any insight on this?

[@AntonPutra]

Little bit confused by the question, what do you mean by "actions inside the cluster"? You can verify locally by using different IAM users with and without access to the eks-admin role

[@ayushsinghrathore7186]

@@AntonPutra I figured out, we need to assume the role and then add the profile containing temporary credentials inside the ~/.aws/credentials Finally do aws eks update-kubeconfig using that assumed role profile to verify the access. Thank you

[@weitanglau162]

awesome series! watched everything! Is there any difference with the new update to eks?

[@AntonPutra]

Thanks, what do you mean?

[@weitanglau162]

@@AntonPutra I believe eks load balancing has new update. Think it's called AWS Load Balancer Controller. Furthermore, I see that in some other examples, they don't have to create a service with those annotations like you have. Why is this so?

[@AntonPutra]

Get Full-Length High-Quality DevOps Tutorials for Free - Subscribe Now! - kzbin.info

[@praveen9290]

Hi....can you continue the playlist with your eks cluster on fargate.

[@AntonPutra]

Sure

[@bhupathivarma9170]

Pls do video on below requirement. 1.IAM role for pods to be able to access EFS. 2. IAM role for cluster-auto scaler. 3. IAM role for alb-ingress controller

[@AntonPutra]

I have similar videos except 3 1. kzbin.info/www/bejne/mKaTfmWvZ8xko5o 2. kzbin.info/www/bejne/najQlZWleJJ1qqc 3. TODO :)

[@bhupathivarma9170]

@@AntonPutra you are awesome ur videos r crisp and clear... Thank you so much

[@AntonPutra]

@@bhupathivarma9170 🥰

[@bhupathivarma9170]

@@AntonPutra please help with 3 if possible

[@AntonPutra]

@@bhupathivarma9170 do you have any specific use case for 3? Can you describe your workload?

[@henryhuang24]

Can not find the IAM policies JSON file in your Github

[@AntonPutra]

You can find them here - antonputra.com/eks-add-user-vs-role/

[@frankdajek359]

@@AntonPutra Nope. Get a 404

[@rajeshchaudhary883]

Why didn't you use RBAC for the second option?

[@AntonPutra]

how come? maybe built in group?

[@rajeshchaudhary883]

Can you please increate the volume?

[@AntonPutra]

it's pretty high