* kube2iam update to 0.10.0; fixes 5th generation instance types and cross namespace permissions * kube2iam adding home to Chart.yaml
kube2iam
Installs kube2iam to provide IAM credentials to pods based on annotations.
TL;DR;
$ helm install stable/kube2iam
Introduction
This chart bootstraps a kube2iam deployment on a Kubernetes cluster using the Helm package manager.
Prerequisites
- Kubernetes 1.4+ with Beta APIs enabled
Installing the Chart
To install the chart with the release name my-release:
$ helm install stable/kube2iam --name my-release
The command deploys kube2iam on the Kubernetes cluster in the default configuration. The configuration section lists the parameters that can be configured during installation.
Uninstalling the Chart
To uninstall/delete the my-release deployment:
$ helm delete my-release
The command removes all the Kubernetes components associated with the chart and deletes the release.
Configuration
The following table lists the configurable parameters of the kube2iam chart and their default values.
| Parameter | Description | Default |
|---|---|---|
affinity |
affinity configuration for pod assignment | {} |
extraArgs |
Additional container arguments | {} |
host.ip |
IP address of host | $(HOST_IP) |
host.iptables |
Add iptables rule | false |
host.interface |
Host interface for proxying AWS metadata | docker0 |
image.repository |
Image | jtblin/kube2iam |
image.tag |
Image tag | 0.6.4 |
image.pullPolicy |
Image pull policy | IfNotPresent |
nodeSelector |
node labels for pod assignment | {} |
podAnnotations |
annotations to be added to pods | {} |
rbac.create |
If true, create & use RBAC resources | false |
rbac.serviceAccountName |
existing ServiceAccount to use (ignored if rbac.create=true) | default |
resources |
pod resource requests & limits | {} |
updateStrategy |
Strategy for DaemonSet updates (requires Kubernetes 1.6+) | OnDelete |
verbose |
Enable verbose output | false |
Specify each parameter using the --set key=value[,key=value] argument to helm install. For example,
$ helm install stable/kube2iam --name my-release \
--set=extraArgs.base-role-arn=arn:aws:iam::0123456789:role/,extraArgs.default-role=kube2iam-default,host.iptables=true,host.interface=cbr0
Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,
$ helm install stable/kube2iam --name my-release -f values.yaml
Tip
: You can use the default values.yaml