CODEWITHSUNDEEP
amazon-web-serviceskuberneteskops
pkaramol
pkaramol

Reputation: 19402

kubernetes: kops and IAMFullAccess policy

According to documentation of both kops and aws, the dedicated kops user needs IAMFullAccess permission to operate properly.

Why is this permission needed?

Is there a way to avoid (i.e. restrict) this, given that it is a bit too intrusive to create a user with such a permission?

edit: one could assume that the specific permission is needed to attach the respective roles to the master(s) and node(s) instances;

therefore perhaps the question / challenge becomes how to:

Upvotes: 3

Views: 447

Answers (1)

Nebril
Nebril

Reputation: 3273

As far as I understand kops design, it's meant to be end to end tool for provisioning you with k8s clusters. If you want to provision your nodes separately and deploy k8s on them I would suggest to use other tool, such as kubespray or kubeadm:

https://github.com/kubernetes-incubator/kubespray

https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/

Upvotes: 1

Related Questions