[EKS] [request]: IAM Roles for Service Accounts - Windows Support

[ibaki-p]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Which service(s) is this request for?

EKS

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?

We have containers running on EKS Windows self-managed node groups. Looking to leverage IAM Roles for service accounts to retrieve secrets from AWS Secret Manager.

Are you currently working around this issue?

Not clear at this moment. We looked into using K8s secrets-store-csi-driver to mount the secrets into the pod however secrets-store-csi-driver-provider-aws does not seem to support Windows containers.

[ibaki-p]

I have not tested yet but It looks like IAM Roles for Service Accounts are actually supported for Windows nodes. See aws/aws-sdk-net#1615. Closing for now.