Platform Passwordless Access Configuration for EKS

Tag JFrog users with IAM role ARNs using the Put IAM Role API after EKS and Access service configuration.

After you configure the passwordless access in the EKS platform, you must configure the JFrog Platform with the information.

  1. Create a new user in the JFrog Platform for passwordless access to EKS and provide the appropriate permissions for the relevant repositories.

    You can also use an existing user, but we recommend creating a dedicated user for this purpose.

  2. Create a scoped token for the user with the required permissions.

  3. Run the Put IAM Role API with the user name and the IAM role to tag the JFrog Platform user with the ARN role. The following example shows a sample command to run the API.

    curl -XPUT -H "Content-type: application/json"  -H "Authorization: Bearer <token>"  https://example.jfrog.io/access/api/v1/aws/iam_role -d '{"username":"<JFROG_PLATFORM_USERNAME>", "iam_role": "arn:aws:iam::0000000000:role/jfrole"}' -vvv
  4. Run the GET IAM Role API. The following example shows a sample command to run the API.

    curl -H "Content-type: application/json"  -H "Authorization: Bearer <token>"  https://example.jfrog.io/access/api/v1/aws/iam_role/${JFROG_PLATFORM_USERNAME} -vvv