IRSA for non EKS Clusters | PlatformCon 2023

This talk discusses using IAM Roles for Service Accounts (IRSA) to provide secure access to AWS resources from within pods in EC2-based Kubernetes clusters. IRSA is a robust and fine-grained solution that is easy to set up and less prone to incidents than other solutions. It is backed by the OpenSource project Pod Identity Webhook and can be used on non-EKS clusters.
To provide secure access to AWS resources, we have been using Kiam & Kube2iam project on our EC2-based clusters. Many of the AWS Customers moved to Amazon EKS and then adopted IAM Roles for Service Accounts (IRSA). IRSA is a feature that enables secure access to AWS resources from within pods while also providing robust identity and access management capabilities.
IRSA is much more robust, more fine-grained and easy to set up and less prone to incidents compared to other solutions.
Speaker: Suraj Narwade
Sr. Platform Engineer, RVU
_____________
- Check all the PlatformCon talks: platformcon.com/talks
- Check all the PlatformCon tracks: platformcon.com/#conference-t...
- Join Platform Engineering Slack: platformengineering.org/slack-rd
#PlatformCon2023 #PlatformEngineering

[@scatat]

Wow - I'm surprised no-one has commented on this post! I have been tearing my hair out trying to figure out a way of setting up a single node K8 in AWS on EC2 without using EKS and this is the key to doing it! The repo is already there to find but you've shown up on a Google search and the way it's explained by you is clear and consise - wonderful. Thank you so much for this - it's saved me a huge amount of pain and hassle. Fantastic video.

[@user-bl1ub2gu2q]

hi awesome video for a kickstart. would request to make detailed video step by step on kops irsa and how to use efs csi pv,pvc with kops!!