AWS codepipeline documentation change
Summary
Enhanced documentation for EKS deployment actions including S3 Helm chart support and environment variable substitution examples
Security assessment
Changes clarify functionality but do not address security vulnerabilities or document security features. Focuses on operational capabilities rather than security controls.
Diff
diff --git a/codepipeline/latest/userguide/action-reference-EKS.md b/codepipeline/latest/userguide/action-reference-EKS.md index c329b52ce..84dbc5daf 100644 --- a//codepipeline/latest/userguide/action-reference-EKS.md +++ b//codepipeline/latest/userguide/action-reference-EKS.md @@ -135,3 +135 @@ The security groups for the VPC for your cluster. These are part of the same VPC - * **Description:** The action looks for the Kubernetes manifest file or Helm chart in the source file repository for the pipeline). - -The action requires an existing image that has already been pushed to your image repository. Because the image mapping is provided by the manifest file, the action does not require that the Amazon ECR source be included as a source action in the pipeline. + * **Description:** The action looks for the Kubernetes manifest file or Helm chart in the source file repository for the pipeline. If you want to use helm charts in .tgz format stored in an S3 bucket, you can do so by configuring the S3 Bucket/Key as your source action. For example, the object key provided would be `my-chart-0.1.0.tgz`. @@ -152,0 +151,2 @@ The action requires an existing image that has already been pushed to your image +Used to replace variables such as image repositories or image tags in manifest files or helm chart values files. + @@ -156 +156 @@ The action requires an existing image that has already been pushed to your image -The key in a key-value environment variable pair, such as `Name`. +The key in a key-value environment variable pair, such as `$IMAGE_TAG`. @@ -161,3 +161 @@ The key in a key-value environment variable pair, such as `Name`. -The value for the key-value pair, such as `Production`. The value can be parameterized with output variables from pipeline actions or pipeline variables. - -This value will be replaced in your Manifest files if the corresponding $Key is present. +The value for the key-value pair, such as `v1.0`. The value can be parameterized with output variables from pipeline actions or pipeline variables. For example, pipeline can have an ECRBuildAndPublish action that creates an ECR image with `${codepipeline.PipelineExecutionId}`, and the EKS action can use this image using `${codepipeline.PipelineExecutionId}` as the value of the environment variable.