Загрузка...

IRSA Explained: How an IAM Role Reaches Your Pod

@DevXOps-tech
How does an IAM role reach a Kubernetes pod without a single static key?

Think of IRSA like a secure building:
🏢 Pod = Employee
🪪 OIDC JWT = Wristband
🚪 Trust Policy = Bouncer
🎫 STS = Badge Desk
🔓 AWS Services = Doors

Wristband → Bouncer → Badge Desk → Doors. Zero static keys.

Full deep dive: https://www.youtube.com/watch?v=MSdB_RqBJ8E

#eks #irsa #oidc #kubernetes #aws #iam #devops #shorts

Видео IRSA Explained: How an IAM Role Reaches Your Pod канала DevXOps Tech
eks irsa oidc kubernetes iam aws pod identity secure building analogy sts assume role service account devops shorts
Комментарии отсутствуют
Зарегистрируйтесь или войдите с
Информация о видео
25 апреля 2026 г. 17:01:22
00:00:40
DevXOps Tech
Теги
Правообладателям
Жалоба на материал Недопустимый материал Нарушение авторских прав
Комментарии
Поделиться
Другие видео канала

JoinGroup & SyncGroup — Kafka's Handshake Protocol ExplainedJoinGroup & SyncGroup — Kafka's Handshake Protocol Explained

How Elasticsearch Finds Words in Milliseconds — Inverted Index, Segments & Page CacheHow Elasticsearch Finds Words in Milliseconds — Inverted Index, Segments & Page Cache

Kafka Metadata Replication — Quorum vs ISR (Animated)Kafka Metadata Replication — Quorum vs ISR (Animated)

Swap Storms: When Your Linux Server Slows Down 100xSwap Storms: When Your Linux Server Slows Down 100x

How Ansible Really Works: Control Node, Inventory, Playbooks, and Execution Under the HoodHow Ansible Really Works: Control Node, Inventory, Playbooks, and Execution Under the Hood

4 Kafka Partition Assignment Strategies — Choose Wrong = Wrecked Throughput4 Kafka Partition Assignment Strategies — Choose Wrong = Wrecked Throughput

Why Every AI Company Independently Picked .mdWhy Every AI Company Independently Picked .md

Ansible: Who Actually Runs Your Code?Ansible: Who Actually Runs Your Code?

Linux High Availability: Keepalived or Pacemaker? The Definitive Decision GuideLinux High Availability: Keepalived or Pacemaker? The Definitive Decision Guide

Ansible Is NOT Simple YAML — Here's What Really HappensAnsible Is NOT Simple YAML — Here's What Really Happens

Git Pull Is NOT One Command — It's TwoGit Pull Is NOT One Command — It's Two

Kafka Barely Touches the Disk (Page Cache in 30 Seconds)Kafka Barely Touches the Disk (Page Cache in 30 Seconds)

Git Merge vs Rebase vs Pull: When to Use Each (Animated Explainer) - Re UploadedGit Merge vs Rebase vs Pull: When to Use Each (Animated Explainer) - Re Uploaded

Apache Kafka® Consumer Group Protocol — Coordinators, Rebalancing & Offsets (Visual Explainer)Apache Kafka® Consumer Group Protocol — Coordinators, Rebalancing & Offsets (Visual Explainer)

12 Stages Between kubectl apply and Serving Traffic12 Stages Between kubectl apply and Serving Traffic

What AWS Actually Uses Behind Its Load Balancers (ALB, NLB, GWLB Internals Explained)What AWS Actually Uses Behind Its Load Balancers (ALB, NLB, GWLB Internals Explained)

Elasticsearch Internals: Refresh vs Flush vs Commit — What Each Really DoesElasticsearch Internals: Refresh vs Flush vs Commit — What Each Really Does

How to Access EC2 — 5 Methods Compared (SSH, EIC, SSM, Serial Console)How to Access EC2 — 5 Methods Compared (SSH, EIC, SSM, Serial Console)

SLO Explained in 38 Seconds — The Target Speed for Your ServiceSLO Explained in 38 Seconds — The Target Speed for Your Service

Git Merge Creates a Junction — Here's How It WorksGit Merge Creates a Junction — Here's How It Works

Why Free RAM Makes Elasticsearch FasterWhy Free RAM Makes Elasticsearch Faster

Яндекс.Метрика
© 2008-2026 «Информационно-развлекательный портал города Верхняя Салда»
salda.ws@mail.ru salda_ws Контакты Карта портала Сообщить об ошибке Соглашения Пользовательское соглашение Соглашение о конфиденциальности Согласие на обработку персональных данных Информация для правообладателей Об использовании Cookies
Все заметки Новая заметка Страницу в заметки
Страницу в закладки Мои закладки
На информационно-развлекательном портале SALDA.WS применяются cookie-файлы. Нажимая кнопку Принять, вы подтверждаете свое согласие на их использование.
О CookiesНапомнить позжеПринять