Merge pull request #318 from percona/copilot/sub-pr-317

radoslawszulgo · web-flow · commit c6f00fadc739 · 2025-11-13T13:29:35.000+01:00
Add OIDC ID extraction guidance for IRSA setup
diff --git a/.gitignore b/.gitignore
@@ -15,3 +15,4 @@ styles/
 # Allow
 
 !styles/config/vocabularies/Percona/**
+.cache/
diff --git a/docs/manage/automate-s3-access.md b/docs/manage/automate-s3-access.md
@@ -161,6 +161,9 @@ aws iam create-policy --policy-name pbm-s3-access-policy --policy-document file:
 This role will be assumed by the Kubernetes service account used by your PBM pods.
 
 First, create a trust policy JSON file (e.g., `pbm-trust-policy.json`). This policy allows your Kubernetes service account to assume the role. Replace `<account-id>`, `<region>`, and `<oidc-id>` with your AWS account ID, EKS cluster region, and the OIDC ID from step 1.
+
+> **Note:** The OIDC ID is the unique identifier at the end of the OIDC issuer URL returned in step 1. For example, if the issuer URL is `https://oidc.eks.us-west-2.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE`, then the OIDC ID is `EXAMPLED539D4633E53DE1B71EXAMPLE`.
+
 ```json
 {
   "Version": "2012-10-17",

Original file line number	Diff line number	Diff line change
`@@ -15,3 +15,4 @@ styles/`
`15`	`15`	`# Allow`
`16`	`16`
`17`	`17`	`!styles/config/vocabularies/Percona/**`
	`18`	`+.cache/`
Original file line number	Diff line number	Diff line change
`@@ -161,6 +161,9 @@ aws iam create-policy --policy-name pbm-s3-access-policy --policy-document file:`
`161`	`161`	`This role will be assumed by the Kubernetes service account used by your PBM pods.`
`162`	`162`
`163`	`163`	First, create a trust policy JSON file (e.g., `pbm-trust-policy.json`). This policy allows your Kubernetes service account to assume the role. Replace `<account-id>`, `<region>`, and `<oidc-id>` with your AWS account ID, EKS cluster region, and the OIDC ID from step 1.
	`164`	`+`
	`165`	+> Note: The OIDC ID is the unique identifier at the end of the OIDC issuer URL returned in step 1. For example, if the issuer URL is `https://oidc.eks.us-west-2.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE`, then the OIDC ID is `EXAMPLED539D4633E53DE1B71EXAMPLE`.
	`166`	`+`
`164`	`167`	```json
`165`	`168`	`{`
`166`	`169`	`"Version": "2012-10-17",`