jenkins-x/terraform-aws-eks-jx

boot job fails for AWS Secrets manager

ankitm123 opened this issue · 0 comments

Summary

Boot job when using AWS secrets manager as the secret backend fails.
The reason is that the boot job runs under a service account (jx-boot-job) that does not have access to aws secrets manager.
Only the external secrets service account in secret-infra namespace has access to it, so external secrets can talk to AWS, but the boot job cannot.

Related to jenkins-x/jx#7941