This issue is to track a new release of the managed App Mesh Envoy image.
v1.12.1.1 adds support for IAM Roles for Service Accounts (IRSA).
With IRSA on Amazon EKS clusters, you can associate an IAM role with a Kubernetes service account. This service account can then provide AWS permissions to the containers in any pod that uses that service account. With this feature, you no longer need to provide extended permissions to the worker node IAM role so that pods on that node can call AWS APIs.
For more information on IRSA, see: https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html
Fixes: #102
The updated image is now available as:
840364872350.dkr.ecr.<region>.amazonaws.com/aws-appmesh-envoy:v1.12.1.1-prod
Where <region> is any region where App Mesh is available: https://docs.aws.amazon.com/general/latest/gr/rande.html#appmesh_region
We'll keep this issue open as we update our examples and documentation to reflect the latest image version.
Docs / examples are updated. Resolving!
Most helpful comment
The updated image is now available as:
Where
<region>is any region where App Mesh is available: https://docs.aws.amazon.com/general/latest/gr/rande.html#appmesh_regionWe'll keep this issue open as we update our examples and documentation to reflect the latest image version.