This message was deleted.
# rke2
a
This message was deleted.
c
correct, that is what it will do
you can also store creds in a secret, if you need static creds that can be rotated without restarting.
m
Thanks. Is the IAM auth typically done using an instance profile? We have IRSA but I don't think that will work because the backup runs on the host not inside kubernetes right?
c
yes it would need to be an instance profile, not a IRSA pod role as RKE2 runs on the host itself, not within the cluster. It IS the cluster.
👍 1