IAM Roles for Service Accounts | Learn about IRSA with demo in 20 mins

This video is about IRSA (IAM roles for Service Accounts). It talks about what is IRSA, benefits of IRSA, how IRSA ties together elements from AWS IAM, OpenID Connect (IdP), K8s Service Accounts and Pods, followed by hands on demo.
References:
docs.aws.amazon.com/eks/lates...
aws.amazon.com/blogs/opensour...
TIMESTAMPS
00:00 Introduction
00:15 What is IRSA?
01:11 Benefits of IRSA
02:12 EKS OpenId Connect Provider
02:44 IAM Federated identities using OIDS
03:05 Flow for retrieving AWS credentials
03:55 Demo
21:00 Decoding the JWT token
22:53 Outro
#aws #irsa #eks #iam #cloud #security

[@code-for-mars]

Great Explanation , Thanks

[@aidataverse]

Very good excellent , you saved a lot of my time.

[@visa2learn]

Glad to hear that

[@vastavikgymrat]

This is Gold video bro..

[@aidataverse]

1000 likes from my side

[@juanrandsonian2949]

Man, this is by far the best explanation I have found about K8s Service Accounts. You deserve many more subscribers!

[@visa2learn]

Thanks for the kind words. Feel free to share it with your friends. That may help me get more subscribers :)

[@anshusinha2378]

One of the best explanation with hands on.

[@visa2learn]

Thank you, glad it was helpful.

[@dhavamaniv3648]

Wowwwwww you explained the complex concept with clear explanation and demo. Thank you

[@visa2learn]

Glad you liked it

[@anbuece06]

Excellent work! Keep posting more videos.

[@TheLegoody]

This taught me a lot about K8s Service accounts and how iam roles are attached to them

[@visa2learn]

Glad it was helpful

[@vaklinov81]

Man I really like your explanation with really good and practical example! Big thanks!

[@visa2learn]

Thanks for the kind words. Glad it was helpful

[@invalidred]

Such a fantastic in depth video that I very much needed to understand this very complex concept. You've done such a fine job explaining the concepts, visually showing the data flow via images and then ending with hands-ons lab fireworks! You sir are the finest!

[@visa2learn]

Glad it was helpful!

[@akhilsingh5122]

Amazing

[@AlexLi-zige]

great video for IRSA, high recommended

[@visa2learn]

Thanks :)

[@garciajero]

This is really well explained !

[@visa2learn]

Thanks

[@edu_franco94]

thank you very much for this learning!

[@visa2learn]

Glad it was helpful!

[@israel8707]

Excellent, thanks you for shared :)

[@visa2learn]

Thanks for the visit

[@Dan-dh2bl]

Nicely done, thank you

[@visa2learn]

Thanks for watching!

[@veeramohan1758]

Well explained, clear...

[@visa2learn]

Glad you liked it

[@charank7852]

Thank you very much..

[@visa2learn]

You are welcome

[@Aditya-wj5gy]

nice explaination!

[@visa2learn]

Glad you liked it!

[@bijujoseph5342]

Good explanation. I tried this & tested with few more "aws s3" commands BAD & GOOD scenarios

[@visa2learn]

Nice

[@Shakeersyed99499]

Superb

[@visa2learn]

Thank You!

[@tejasdevgekar]

beautiful

[@visa2learn]

Thank you!

[@balakrishnag1707]

nice presentation, if I am using kubeadm what is procedure

[@nks36]

awesome video, only one suggestion, when you type command, can you try to keep them in the middle of the screen? It's difficult to read the bottom of the screen at time.

[@visa2learn]

Noted! Thanks for the feedback

[@narindersharma303]

watched at 1.5x 👍

[@zandymarantal9113]

Great presentation! Was able to replicate everything except the secrets part at the end. Not seeing any secrets on my v1.24 cluster for some reason. Any ideas?

[@visa2learn]

If you are saying that IRSA worked for you and you are able to access your services, the secret should be there. Are you looking for it in the right namespace?

[@suganyam8346]

Cam we create a service account instead of eksctl using any terraform function?

[@vinnymark453]

do we need to give any additional permissions to that app pod like rbac?

[@visa2learn]

Additional permissions like rbac not needed unless your app has special needs like being able to invoke kube apis or if your cluster has network configurations which require pods to have additional permissions. But those have nothing to do with IRSA per se.

[@sivapalanamirthagunbalasin6231]

I am trying to setup a local cluster for testing purpose with minkube and docker desktop. Do you know, how i can use irsa? Cuz those cluser don’t generate OIDC

[@visa2learn]

IAM roles for Service Accounts (IRSA) is specific to AWS EKS cluster

[@balakrishnag1707]

I created a k8s cluster using kubeadm, But I want to use persistence volume, how to IRSA, I can't able to generate OIDC , How can you explain please