feat: Starting with 1.30, do not use the cluster OIDC issuer URL by default in the identity provider config (#3055)

fix: Starting with `1.30`, do not use the cluster OIDC issuer URL by default in the identity provider config
This commit is contained in:
Bryant Biggs
2024-05-31 13:01:16 -04:00
committed by GitHub
parent 59024ebd0a
commit 00f076ada4
2 changed files with 19 additions and 6 deletions

View File

@@ -364,8 +364,12 @@ EKS managed node groups on `v18.x` by default create a security group that does
# OIDC Identity provider
cluster_identity_providers = {
sts = {
client_id = "sts.amazonaws.com"
cognito = {
client_id = "702vqsrjicklgb7c5b7b50i1gc"
issuer_url = "https://cognito-idp.us-west-2.amazonaws.com/us-west-2_re1u6bpRA"
username_claim = "email"
groups_claim = "cognito:groups"
groups_prefix = "gid:"
}
}