instead of IAM role chaining just gonna use two separate profiles, on…

…e for ec2 and the other for eks
didclab · Jun 21, 2024 · 1d42b95 · 1d42b95
1 parent 97a3e34
commit 1d42b95
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/src/main/resources/bootstrap-aws.yml → src/main/resources/bootstrap-ec2.yml b/src/main/resources/bootstrap-aws.yml → src/main/resources/bootstrap-ec2.yml
@@ -11,4 +11,4 @@ spring:
         backend: secrets
       authentication: aws_iam
       aws-iam:
-        role: aws-role
+        role: ec2-role
diff --git a/src/main/resources/bootstrap-eks.yml b/src/main/resources/bootstrap-eks.yml
@@ -0,0 +1,14 @@
+spring:
+  application:
+    name: TransferService
+  cloud:
+    vault:
+      uri: ${VAULT_URI}
+      kv:
+        enabled: true
+        profile-separator: '/'
+        default-context: prod/TransferService
+        backend: secrets
+      authentication: aws_iam
+      aws-iam:
+        role: eks-role