2121 value : $(params.cluster-name)-node-role
2222 - name : launch-template-stack-name
2323 value : $(params.cluster-name)-launch-template
24+ - name : namespace-count
25+ value : $(params.namespace-count)
2426 retries : 10
2527 taskRef :
2628 kind : Task
6163 - default : https://raw.githubusercontent.com/awslabs/kubernetes-iteration-toolkit/main/tests/assets/eks_node_role.json
6264 name : node-role-cfn-url
6365 type : string
66+ - name : namespace-prefix
67+ default : " default"
68+ description : " The prefix of namespaces for EKS Pod Identity test."
69+ - name : namespace-count
70+ default : " 1"
71+ description : " The number of namespaces for EKS Pod Identity test."
72+ - name : pia-trust-policy-url
73+ default : " https://raw.githubusercontent.com/awslabs/kubernetes-iteration-toolkit/main/tests/assets/eks-pod-identity/pia-trust-policy.json"
74+ type : string
75+ - name : pia-test-config-url
76+ default : " https://raw.githubusercontent.com/awslabs/kubernetes-iteration-toolkit/main/tests/assets/eks-pod-identity/eks-pod-identity/config.yaml"
77+ - name : pia-test-pod-spec-url
78+ default : " https://raw.githubusercontent.com/awslabs/kubernetes-iteration-toolkit/main/tests/assets/eks-pod-identity/eks-pod-identity/pod-default.yaml"
79+ - name : timeout-pia-pod-creation
80+ default : " 5m"
6481 tasks :
6582 - name : slack-notification
6683 params :
@@ -221,6 +238,66 @@ spec:
221238 workspace : results
222239 - name : config
223240 workspace : config
241+ - name : create-pod-identity-association
242+ params :
243+ - name : cluster-name
244+ value : $(params.cluster-name)
245+ - name : endpoint
246+ value : $(params.endpoint)
247+ - name : namespace-prefix
248+ value : $(params.namespace-prefix)
249+ - name : namespace-count
250+ value : $(params.namespace-count)
251+ - name : pia-trust-policy-url
252+ value : $(params.pia-trust-policy-url)
253+ runAfter :
254+ - generate
255+ taskRef :
256+ kind : Task
257+ name : awscli-eks-pia-create
258+ workspaces :
259+ - name : config
260+ workspace : config
261+ - name : generate-eks-pod-identity
262+ params :
263+ - name : cl2-eks-pod-identity-pods
264+ value : $(params.cl2-eks-pod-identity-pods)
265+ - name : cl2-default-qps
266+ value : $(params.cl2-default-qps)
267+ - name : cl2-default-burst
268+ value : $(params.cl2-default-burst)
269+ - name : cl2-uniform-qps
270+ value : $(params.cl2-uniform-qps)
271+ - name : results-bucket
272+ value : $(params.results-bucket)
273+ - name : nodes
274+ value : $(params.desired-nodes)
275+ - name : cluster-name
276+ value : $(params.cluster-name)
277+ - name : namespace-prefix
278+ value : $(params.namespace-prefix)
279+ - name : namespace-count
280+ value : $(params.namespace-count)
281+ - name : pia-test-config-url
282+ value : $(params.pia-test-config-url)
283+ - name : pia-test-pod-spec-url
284+ value : $(params.pia-test-pod-spec-url)
285+ - name : timeout-pia-pod-creation
286+ value : $(params.timeout-pia-pod-creation)
287+ - name : amp-workspace-id
288+ value : ' $(params.amp-workspace-id)'
289+ runAfter :
290+ - create-pod-identity-association
291+ taskRef :
292+ kind : Task
293+ name : load-pod-identity
294+ workspaces :
295+ - name : source
296+ workspace : source
297+ - name : results
298+ workspace : results
299+ - name : config
300+ workspace : config
224301 - name : cw-metrics
225302 params :
226303 - name : dimensions
@@ -230,11 +307,11 @@ spec:
230307 - name : namespace
231308 value : $(params.kubernetes-version)
232309 runAfter :
233- - generate
310+ - generate-eks-pod-identity
234311 taskRef :
235312 kind : Task
236313 name : cloudwatch
237314 workspaces :
238315 - name : source
239316 - name : results
240- - name : config
317+ - name : config
0 commit comments