eksctl-io/eksctl

Skip fetching intermediate CA authority thumbprint from OIDC issuer URL when associating an IAM OIDC provider

cPu1 opened this issue · 0 comments

cPu1 commented

When creating an IAM OIDC provider, eksctl issues a request to the OIDC issuer URL to obtain a thumbprint of the top intermediate CA thumbprint of the OIDC identity provider server certificate. However, the thumbprint field is optional in CreateOpenIDConnectProviderInput, and when not supplied, IAM also performs the same steps.