Skip to content

feat: EKS IAM Roles for Service Accounts for Runner Pods#226

Merged
mumoshu merged 1 commit intomasterfrom
eks-rsa
Dec 8, 2020
Merged

feat: EKS IAM Roles for Service Accounts for Runner Pods#226
mumoshu merged 1 commit intomasterfrom
eks-rsa

Conversation

@mumoshu
Copy link
Copy Markdown
Collaborator

@mumoshu mumoshu commented Dec 7, 2020

One of the pod recreation conditions has been modified to use hash of runner spec, so that the controller does not keep restarting pods mutated by admission webhooks.

This naturally allows us, for example, to use IRSA for EKS that requires its admission webhook to mutate the runner pod to have additional, IRSA-related volumes, volume mounts and env.

Resolves #200

One of the pod recreation conditions has been modified to use hash of runner spec, so that the controller does not keep restarting pods mutated by admission webhooks. This naturally allows us, for example, to use IRSA for EKS that requires its admission webhook to mutate the runner pod to have additional, IRSA-related volumes, volume mounts and env.

Resolves #200
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Feature: Natively Support IRSA on EKS Properly

1 participant