Skip to content

Commit 02569c6

Browse files
committed
Additional link and fix link at end
Signed-off-by: Alex Ellis (OpenFaaS Ltd) <[email protected]>
1 parent 0d073fa commit 02569c6

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

_posts/2025-07-09-irsa-functions.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ If your team is developing code for Kubernetes using AWS EKS, then OpenFaaS can
2222

2323
Both AWS Lambda and OpenFaaS can be used to manage resources within AWS, with either shared credentials which need to be created, managed and rotated by your team, or with ambient credentials which are automatically obtained at runtime by the function.
2424

25-
Our function will be used to create repositories in Elastic Container Registry (ECR). This is a common task for teams that run OpenFaaS in a multi-tenant environment, where each tenant or team publishes their own functions to the platform. It'll receive credentials using IAM Roles for Service Accounts (IRSA), which is the most modern way to map Kubernetes Service Accounts to native AWS IAM roles.
25+
Our function will be used to create repositories in Elastic Container Registry (ECR). This is a common task for teams that run [OpenFaaS in a multi-tenant environment](https://www.openfaas.com/blog/build-a-multi-tenant-functions-platform/), where each tenant or team publishes their own functions to the platform. It'll receive credentials using IAM Roles for Service Accounts (IRSA), which is the most modern way to map Kubernetes Service Accounts to native AWS IAM roles.
2626

2727
Contents:
2828

@@ -298,7 +298,7 @@ With a few simple steps, you can take code in the form of a plain files, a zip f
298298
1. Create a tenant namespace using the [OpenFaaS Gateway's REST API](https://docs.openfaas.com/reference/rest-api/#create-a-namespace) i.e. `tenant`
299299
2. Create a repository for the tenant's new function you want to build i.e. `tenant/fn1`
300300
3. Use the [Function Builder's API](https://docs.openfaas.com/openfaas-pro/builder/) to publish the image to the full ARN path i.e. `ACCOUNT_NUMBER.dkr.ecr.eu-west-1.amazonaws.com/tenant1/fn1:TAG`
301-
4. Post a request to the pOpenFaaS Gateway's REST API](https://docs.openfaas.com/reference/rest-api/#deploy-a-function) to deploy the function to the `tenant1` namespace
301+
4. Post a request to the [OpenFaaS Gateway's REST API](https://docs.openfaas.com/reference/rest-api/#deploy-a-function) to deploy the function to the `tenant1` namespace
302302

303303
Highlights of this approach:
304304

@@ -315,3 +315,7 @@ We wrote to the AWS API directly, however you can use the [Event Connectors for
315315

316316
The same technique can be applied for other APIs such as the Kubernetes API, for when you want a function to obtain an identity to manage resources in one or more Kubernetes clusters: [Learn how to access the Kubernetes API from a Function](https://www.openfaas.com/blog/access-kubernetes-from-a-function/).
317317

318+
You may also like to learn how to run OpenFaaS as a multi-tenant platform:
319+
320+
* High-level overview and customer stories - [Integrate FaaS Capabilities into Your Platform with OpenFaaS](https://www.openfaas.com/blog/add-a-faas-capability/)]
321+
* Deep dive into technical details - [Build a multi-tenant functions platform](https://www.openfaas.com/blog/build-a-multi-tenant-functions-platform/).

0 commit comments

Comments
 (0)