External_ID Support for Cross account IAM Role

[abhisheknsit]

AWS IAM supports external id as a security measure for cross account IAM roles.
Ref: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html

Issue for enhancement to add support for external id in KIAM.

[randomvariable]

Unless there's anyone else planning to do this, am willing to take this one.

[randomvariable]

In terms of UX, any objection to doing it in the form of an iam.amazonaws.com/external-id annotation?

[harishspqr]

Given that external ID is kind of like a password, from security perspective will it make sense to add it as a secret and mount it on to a user pod instead of having it in clear text in the pod manifests ?

[randomvariable]

Apologies for the delay. This is in progress.

[Lokicity]

Hi, is there an ETA for this work? We would love the support for external_ID.

[pingles]

It's being worked on at the moment, and aiming to be part of a v4 release soon.

[pingles]

This was merged earlier today in #430.