Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

NO-JIRA: Update docs/sts.md #634

Merged
merged 1 commit into from Dec 13, 2023
Merged

NO-JIRA: Update docs/sts.md #634

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
3 changes: 2 additions & 1 deletion docs/sts.md
View file
Open in desktop
Expand Up @@ -126,8 +126,9 @@ $ mkdir ./newstscluster ; mv serviceaccount-signer.public ./newstscluster/servic
```

3. Create the AWS IAM Identity provider and the S3 bucket with the OIDC config files:
In `<name-you-choose>` it will be the prefix of the OIDC bucket name and identity provider name that would be created (since under the hood it's an S3 bucket name, it should be globally unique).
```bash
$ ./ccoctl aws create-identity-provider --output-dir newstscluster --name newstscluster --region us-east-2
$ ./ccoctl aws create-identity-provider --output-dir newstscluster --name <name-you-choose> --region us-east-2
```

4. Save/note the last line from that output which contains the ARN for the IAM Identity provider.
Expand Down