Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for IRSA for AWS Components Specs #1098

Open
elamaran11 opened this issue Oct 18, 2024 · 0 comments
Open

Support for IRSA for AWS Components Specs #1098

elamaran11 opened this issue Oct 18, 2024 · 0 comments

Comments

@elamaran11
Copy link

elamaran11 commented Oct 18, 2024

Describe the feature

Team -

I currently see that component specs with AWS integrations dont have support IRSA (IAM Roles for Service Account), rather we are expected to plug in the secret and access keys as part of the deployment for example like below and this basically increases the blast radius and also exposes keys to operator of the EKS Cluster. Appreciate if you can provide support for IRSA with all AWS Components implementation.

apiVersion: dapr.io/v1alpha1
kind: Component
metadata:
  name: statestore
spec:
  type: state.aws.dynamodb
  version: v1
  metadata:
    - name: table
      value: "Orders"
    - name: accessKey
      secretKeyRef:
        name: statestore-secrets
        key: accessKey
    - name: secretKey
      secretKeyRef:
        name: statestore-secrets
        key: secretKey
    - name: region
      secretKeyRef:
        name: statestore-secrets
        key: region
    - name: partitionKey
      value: "orderId"
@elamaran11 elamaran11 changed the title Support for IRSA Support for AWS Components Specs Support for IRSA for AWS Components Specs Oct 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant