Extending ROSA STS to include authentication with AWS Services

In this example we will deploy the Amazon Ingress Controller that uses ALBs, and configure it to use STS authentication.

Deployment

Configure STS

1. Make sure your cluster has the pod identity webhook

2. Download the IAM Policy for the AWS Load Balancer Hooks

3. Create AWS Role with inline policy

4. Create AWS Policy and Service Account

5. Create service account

   Note I had issues with the policy, and for now just gave this user admin creds. Need to revisit and figure out.

6. Create access key

7. Attach policy to user

8. Paste the AccessKeyId and SecretAccessKey into values.yaml

9. tag your public subnet with ``

10. Create a namespace for the controller

1. Apply CRDs

2. Add the helm repo and install the controller (install helm3 if not already)

Deploy Sample Application