The VPC CNI plugin and pods inherit the EKS node IAM role by default.
If the node role has the AmazonEKS_CNI_Plugin attached, pods running on the node can attach and detach ENIs and assign IP addresses.
In this article, you'll learn how to solve this.
More: https://medium.com/@jandersson89/securing-aws-eks-configure-the-vpc-cni-plugin-to-use-irsa-51351f893c18
Post #625
366
Forwarded from LearnKube news
