StackState/Agent IAM role: EKS
StackState Self-hosted v5.0.x
If StackState or the StackState Agent are running within an AWS environment in an EKS cluster instance, an IAM role can be attached to the node-group where the pods
stackstate-serverpods - the attached role can be used for authentication by StackState running in these pods.
stackstate-cluster-agentpod - the attached role can be used for authentication by StackState Cluster Agent running in this pod.
Note: If the AWS Data Collection Account and the Monitor Account are not a part of the same AWS organization, it is not possible to authenticate using the attached IAM role in this way. For details see the AWS documentation on AWS organizations (docs.aws.amazon.com).
To set up an IAM role for StackState or StackState Agent to use, follow the instructions below.
- 2.Find the node-group that contains nodes running the relevant pod or pods and create a node group role:
- StackState on EKS:
- StackState Agent on EKS:
- 3.Attach the policy from the first step to the node-group role from the previous step.Policy for node group role