Class OpenIdConnectProvider

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.Resource
software.amazon.awscdk.services.iam.OpenIdConnectProvider
software.amazon.awscdk.services.eks.OpenIdConnectProvider
All Implemented Interfaces:
IResource, IOpenIdConnectProvider, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable

@Generated(value="jsii-pacmak/1.98.0 (build 00b106d)", date="2024-05-24T02:42:37.927Z") @Stability(Stable) public class OpenIdConnectProvider extends OpenIdConnectProvider
IAM OIDC identity providers are entities in IAM that describe an external identity provider (IdP) service that supports the OpenID Connect (OIDC) standard, such as Google or Salesforce.

You use an IAM OIDC identity provider when you want to establish trust between an OIDC-compatible IdP and your AWS account.

This implementation has default values for thumbprints and clientIds props that will be compatible with the eks cluster

Example:

 // or create a new one using an existing issuer url
 String issuerUrl;
 // you can import an existing provider
 IOpenIdConnectProvider provider = OpenIdConnectProvider.fromOpenIdConnectProviderArn(this, "Provider", "arn:aws:iam::123456:oidc-provider/oidc.eks.eu-west-1.amazonaws.com/id/AB123456ABC");
 OpenIdConnectProvider provider2 = OpenIdConnectProvider.Builder.create(this, "Provider")
         .url(issuerUrl)
         .build();
 ICluster cluster = Cluster.fromClusterAttributes(this, "MyCluster", ClusterAttributes.builder()
         .clusterName("Cluster")
         .openIdConnectProvider(provider)
         .kubectlRoleArn("arn:aws:iam::123456:role/service-role/k8sservicerole")
         .build());
 ServiceAccount serviceAccount = cluster.addServiceAccount("MyServiceAccount");
 Bucket bucket = new Bucket(this, "Bucket");
 bucket.grantReadWrite(serviceAccount);
 

See Also:
  • Constructor Details

    • OpenIdConnectProvider

      protected OpenIdConnectProvider(software.amazon.jsii.JsiiObjectRef objRef)
    • OpenIdConnectProvider

      protected OpenIdConnectProvider(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
    • OpenIdConnectProvider

      @Stability(Stable) public OpenIdConnectProvider(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull OpenIdConnectProviderProps props)
      Defines an OpenID Connect provider.

      Parameters:
      scope - The definition scope. This parameter is required.
      id - Construct ID. This parameter is required.
      props - Initialization properties. This parameter is required.