tag: Oidc · 3 items
- Platform/SRE — Plan: Workloads in private VPCs without internet egress can now verify JWTs via PrivateLink rather than requiring internet access; evaluate creating an interface VPC endpoint if you run air-gapped or restricted-egress VPCs that rely on IAM outbound identity federation.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: This GA feature removes the need for an identity broker when authenticating multiple user populations (employees, contractors, CI/CD systems) to EKS clusters. Evaluate whether your clusters could simplify their auth architecture by replacing any intermediary OIDC broker with direct per-provider associations.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: For EKS clusters in air-gapped or strict-egress VPCs, this GA capability enables IRSA token validation without internet access — evaluate adding the com.amazonaws.
.oidc-eks VPC interface endpoint to your network baseline this quarter. - CI/CD — Skip
- Leader — Skip