Configure an AWS IAM Role for the Splunk Operator

Configure AWS IAM role access for the Splunk Operator.

Map an AWS IAM service account to the Splunk Operator deployment so the operator can read apps from S3 buckets.

Complete the steps to create an AWS IAM Service Account as described in Configure SmartStore access with IRSA. Ensure the IAM Role has only the least amount of privilege necessary for reading apps from S3 buckets.

Map the service account to the splunk-operator deployment.

The following example shows the service account configuration in a Splunk Operator deployment:

CODE 
apiVersion: apps/v1
kind: Deployment
metadata:
  name: splunk-operator-controller-manager
  namespace: splunk-operator
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 10
  ...
  spec:
    containers:
    -
      ...
      serviceAccount: oidc-service-account
      serviceAccountName: oidc-service-account
      terminationGracePeriodSeconds: 10
      volumes:
      - name: app-staging
        persistentVolumeClaim:
          claimName: splunk-operator-app-download
      ...