Please note that this repository is currently archived, and is no longer being maintained.
- It may contain code, or reference dependencies, with known vulnerabilities
- It may contain out-dated advice, how-to's or other forms of documentation
This is a tool that can be useful when migrating from KIAM to IAM Roles for Service Accounts (IRSA). The tool will find all Kubernetes service accounts that has the annotation:
metadata:
annotations:
eks.amazonaws.com/role-arn: "<ANY ARN>"and doesn't have the annotation:
metadata:
annotations:
eks.amazonaws.com/sts-regional-endpoints: "true"./kiam2irsa --help
./kiam2irsa sa --help
./kiam2irsa pods --help./kiam2irsa saKUBECONFIG=~/.kube/my-cluster.config
./kiam2irsa sa./kiam2irsa sa --kubeconfig ~/.kube/my-cluster.config./kiam2irsa pods --status KIAM./kiam2irsa pods --status BOTH./kiam2irsa pods --status IRSAgo build .