/ 
IO-K8s-1.108
⭐ Starred 0 / IO::K8s::CertManager::V1::VaultAWSAuth

NAME

IO::K8s::CertManager::V1::VaultAWSAuth - AWS authenticates with Vault using AWS IAM authentication.

VERSION

version 1.108

iamRoleArn

The ARN of the AWS IAM role to assume using the Kubernetes service account token. Required when using IRSA (serviceAccountRef is set). This role must have a trust policy that allows the OIDC provider to assume it.

mountPath

The Vault mountPath here is the mount path to use when authenticating with Vault. For example, setting a value to `/v1/auth/foo`, will use the path `/v1/auth/foo/login` to authenticate with Vault. If unspecified, the default value "/v1/auth/aws" will be used.

region

The AWS region to use for authentication. If not specified, the region will be determined from AWS_REGION or AWS_DEFAULT_REGION environment variables, falling back to "us-east-1" if not set.

role

A required field containing the Vault Role to assume when authenticating.

serviceAccountRef

A reference to a service account that will be used to request a web identity token for IRSA (IAM Roles for Service Accounts) authentication.

vaultHeaderValue

The Vault header value to include in the STS signing request. This is used to prevent replay attacks.

SUPPORT

Issues

Please report bugs and feature requests on GitHub at https://github.com/pplu/io-k8s-p5/issues.

CONTRIBUTING

Contributions are welcome! Please fork the repository and submit a pull request.

AUTHORS

  • Torsten Raudssus <getty@cpan.org>

  • Jose Luis Martinez Torres <jlmartin@cpan.org>

COPYRIGHT AND LICENSE

This software is Copyright (c) 2018-2026 by Jose Luis Martinez Torres <jlmartin@cpan.org>.

This is free software, licensed under:

The Apache License, Version 2.0, January 2004