#### Kubernetes数据源配置
+ 适用于Amazon EKS
+ OPSCLOUD管理EKS集群不需要kubeconfig文件，不需要安装`aws` , `aws-iam-authenticator` 等命令，使用内置算法模拟STS签名（AWS AK需要拥有对应权限）
##### 凭据配置
+ 凭据类型 `Access key`
+ 配置文件中可注入变量 `${credentialAccessKey}`, `${credentialSecret}`
<b style="color:red">注意YML格式，并删除配置中的注释</b>
##### 注意项
+ STS可用区参考文档:
+ https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
+ STS可用区可选配置:
+ us-east-2
+ us-east-1
+ us-west-1
+ us-west-2
+ ap-south-1
+ ap-northeast-3
+ ap-northeast-2
+ ap-southeast-1
+ ap-southeast-2
+ ap-northeast-1
+ ca-central-1
+ eu-central-1
+ eu-west-1
+ eu-west-2
+ eu-west-3
+ eu-north-1
+ sa-east-1
##### 属性(YML)
```
~~~
kubernetes:
version: 0.0.0
# 注意供应商必须填写 AmazonEKS
provider: AmazonEKS
# EKS相关配置
amazonEks:
# STS可用区(此配置可以不修改)
region: us-east-1
clusterName: eksworkshop-eksctl
url: https://D1E85F6BCC9BC11111D2C1126ADA7999.yl4.eu-west-1.eks.amazonaws.com
# AWS IAM AK
accessKeyId: ${credentialAccessKey}
secretKey: ${credentialSecret}
kubeconfig:
path:
namespace:
ignore:
- default
- kube-node-lease
- kube-public
- kube-system
- upgrade-ns-logtail-ds
- arms-prom
application:
envLabel:
dev:
- dev
daily:
- daily
gray:
- gray
deployment:
nomenclature: # 命名规范 ${prefix}${appName}${suffix}-${envName}
prefix:
suffix:
service:
nomenclature: # 命名规范 ${prefix}${appName}${suffix}-${envName}
prefix:
suffix:
~~~
```
