Authentication

explains how to access AWS EKS using SSO or teleport

Download kubeconfig

Environment	Kubeconfig
prod	🔗 kubeconfig.prod

You can also generate the kubeconfig using taskfile helper:

➜ cd igaawi-kubernetes-aws
➜ export ENV=prod
➜ task eks:generate-config
Retrieving EKS cluster information...
Generating kubeconfig for igaawi-prod-eks...
Kubeconfig generated successfully at kubeconfig.prod
To use this config, run:
  export KUBECONFIG=$(pwd)/.kubeconfigs/kubeconfig.prod
  kubectl get pods -A

Setup kubeconfig

➜ export KUBECONFIG=$(pwd)/.kubeconfigs/kubeconfig.prod

➜ kgpo
Opening in existing browser session.
NAME                         READY   STATUS    RESTARTS   AGE
backend-d7798db5d-dlbjz                  1/1     Running   0          4d2h
backend-d7798db5d-f42pv                  1/1     Running   0          4d2h
frontend-dcfd99cdc-8fhkt                 1/1     Running   0          26h
prod-maintenance-page-786489d6cb-5snxn   1/1     Running   0          14h

Import kubeconfig

Using kconf and kubie

kconf add .kubeconfigs/kubeconfig.prod --context-name=keycloak/igaawi-prod-eks

Then you can activate it in your shells:

kubie ctx keycloak/igaawi-prod-eks

AWS SSO (Devops only)

Production

Access via aws sso:

aws eks update-kubeconfig \
  --region us-west-2 \
  --name igaawi-prod-eks \
  --profile igaawi/sso/prod/administrators