Terraform-aws-eks: OIDC Identity Issuer Option

Created on 4 Sep 2019 · 4Comments · Source: terraform-aws-modules/terraform-aws-eks

When will these options be available in tf? https://docs.aws.amazon.com/eks/latest/APIReference/API_Identity.html

Would like to create clusters with AWS OIDC issuer URLs.

Is it on the roadmap? I could help get this in the project if not.

Source

joshkurz

Most helpful comment

FYI There is an issue tracking this in terraform-provider-aws.

barryib on 5 Sep 2019

👍4

All 4 comments

This has to be resolved further upstream FYI.
The Terraform Providers currently do not expose this field and the aws go sdk does not seem to as well as of yet.

skang0601 on 4 Sep 2019

gotcha, made a comment here https://github.com/weaveworks/eksctl/pull/1265#issuecomment-528103860 seeing what the plan was to get that fork upstream or if something else needed to be done. I don't see any reference in upstream of oidc for eks.

joshkurz on 4 Sep 2019

FYI There is an issue tracking this in terraform-provider-aws.

barryib on 5 Sep 2019

👍4

Terraform aws provider 2.28.0 will have oidc support. Being released on thursday supposedly. https://github.com/terraform-providers/terraform-provider-aws/issues/9995#issuecomment-528924285

Upcoming changelog: https://github.com/terraform-providers/terraform-provider-aws/blob/master/CHANGELOG.md

ENHANCEMENTS:
data-source/aws_eks_cluster: Add identity attribute (support getting OIDC issuer URL) [GH-10006]
resource/aws_eks_cluster: Add identity attribute (support getting OIDC issuer URL) [GH-10006]