= AWS/OktaAKS = * Notes for logging into K8S (AKS) on AWS using Okta authentication for Mac 1. docker run -v ~/.okta/config.properties:/root/.okta/config.properties -v ~/.aws:/root/.aws -it diepes/debug 1. apt update 1. apt install openjdk-11-jre. >> :( No release candidate * apt install default-jre >> included openjdk-17-jre 1. From: https://github.com/tom-smith-okta/okta-awscli-java/blob/master/Dockerfile * curl 'https://raw.githubusercontent.com/oktadeveloper/okta-aws-cli-assume-role/master/bin/install.sh' -o install.sh ; bash install.sh -i * # After install * . "$HOME/.okta/bash_functions" * export PATH="$HOME/.okta/bin:$PATH" 1. Verify with okta-aws - pick a profile name, any name. * # okta-aws oktaprofile sts get-caller-identity * For this example you will now find a new profile oktaprofile under cat ~/.aws/credentials as [oktaprofile] 1. List EKS clusters * aws eks list-clusters --profile oktaprofile --region ap-southeast-2 1. Now install kubectl to get and verify credentials if missing * From: https://kubernetes.io/docs/tasks/tools/install-kubectl-linux/ * https://kubernetes.io/docs/tasks/tools/install-kubectl-linux/ * x86-64 # curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" * chmod +x kubectl; mv kubectl /usr/local/bin