Ingress Controller

OIDC provider # lt is like 3rd party authentication

trust and authentication provider

REGION_CODE=us-east-1 CLUSTER_NAME=roboshop-dev ACC_ID=315069654700

eksctl utils associate-iam-oidc-provider \
    --region $REGION_CODE \
    --cluster $CLUSTER_NAME \
    --approve

Download IAM Policy # permissions

curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.13.4/docs/install/iam_policy.json

Create IAM Policy

aws iam create-policy \
    --policy-name AWSLoadBalancerControllerIAMPolicy \
    --policy-document file://iam-policy.json

Create IAM Role and K8 ServiceAccount. # k8 is nothing but system account and we created here because to give permissions.

Mapping between IAM ROle and K8 Service account

eksctl create iamserviceaccount \
--cluster=$CLUSTER_NAME \
--namespace=kube-system \
--name=aws-load-balancer-controller \
--attach-policy-arn=arn:aws:iam::$ACC_ID:policy/AWSLoadBalancerControllerIAMPolicy \
--override-existing-serviceaccounts \
--region $REGION_CODE \
--approve

Install Load balancer controller drivers

helm repo add eks https://aws.github.io/eks-charts 

helm install aws-load-balancer-controller eks/aws-load-balancer-controller -n kube-system --set clusterName=$CLUSTER_NAME --set serviceAccount.create=false --set serviceAccount.name=aws-load-balancer-controller