Skip to content

Add Private CA Addon #1020

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: mainline
Choose a base branch
from
Open

Add Private CA Addon #1020

wants to merge 4 commits into from

Conversation

geoffcline
Copy link
Contributor

@geoffcline geoffcline commented May 23, 2025

This PR introduces a new AWS Private CA Connector add-on for Kubernetes documentation to be used with Amazon EKS. The changes include adding an entry to the add-ons table and a dedicated section detailing the add-on's purpose, usage, and IAM permissions.

@geoffcline geoffcline requested a review from Copilot May 23, 2025 17:44
@geoffcline geoffcline changed the title draft CA addon Add Private CA Addon May 23, 2025
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces a new AWS Private CA Connector add-on for Kubernetes documentation to be used with Amazon EKS. The changes include adding an entry to the add-ons table and a dedicated section detailing the add-on's purpose, usage, and IAM permissions.

Copy link

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-1020.d3rijirjvbh87e.amplifyapp.com

@@ -78,6 +78,10 @@ You can use any of the following Amazon EKS add-ons.
|<<add-ons-pod-id>>
|EC2, EKS Hybrid Nodes

|Enable users to obtain certificates from AWS Private Certificate Authority (AWS Private CA) for Kubernetes

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Enable cert-manager to issue X.509 certificates from AWS Private CA. Requires cert-manager.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is what we have in the console.

[#add-ons-aws-privateca-connector-iam-permissions]
=== Required IAM permissions

This add-on uses the IAM roles for service accounts capability of Amazon EKS. For more information, see <<iam-roles-for-service-accounts>>.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we support pod identity too.

@@ -78,6 +78,10 @@ You can use any of the following Amazon EKS add-ons.
|<<add-ons-pod-id>>
|EC2, EKS Hybrid Nodes

|Enable users to obtain certificates from AWS Private Certificate Authority (AWS Private CA) for Kubernetes
|<<add-ons-aws-privateca-connector>>
|EC2, EKS Auto Mode
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing Fargate and Hybrid here

@shankara-n
Copy link

Looks good to me!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants