OS Manuals

/usr/bin/secrets-store-csi-driver-provider-aws

AWS Secrets Manager and AWS Systems Manager Parameter Store provider for the Secret Store CSI Driver.

From secrets-store-csi-driver-provider-aws-fips 3.1.4-r4 (enterprise-packages), captured 2026-11-09 by running secrets-store-csi-driver-provider-aws --help (exit 0). permalink

I1109 15:19:01.186583       2 main.go:76] Starting secrets-store-csi-driver-provider-aws version 3.1.4
I1109 15:19:01.186756       2 main.go:77] This provider requires tokenRequests to be configured in the CSIDriver spec (audiences: sts.amazonaws.com, pods.eks.amazonaws.com)
Usage of /usr/bin/secrets-store-csi-driver-provider-aws:
  -burst int
    	Maximum burst for throttle. To mount the requested secret on the pod, the AWS CSI provider lookups the region of the pod and the role ARN associated with the service account by calling the K8s APIs. Increase the value if the provider is throttled by client-side limit to the API server. (default 10)
  -driver-writes-secrets
    	The driver will do the write instead of the plugin
  -eks-addon-version string
    	The EKS addon version of the provider
  -pod-identity-http-timeout string
    	The HTTP timeout threshold for Pod Identity authentication.
  -provider-volume string
    	Rendezvous directory for provider socket (default "/var/run/secrets-store-csi-providers")
  -qps int
    	Maximum query per second to the Kubernetes API server. To mount the requested secret on the pod, the AWS CSI provider lookups the region of the pod and the role ARN associated with the service account by calling the K8s APIs. Increase the value if the provider is throttled by client-side limit to the API server. (default 5)
Options (6)
OptionDescriptionSource
-burst intMaximum burst for throttle.help
-driver-writes-secretsThe driver will do the write instead of the pluginhelp
-eks-addon-version stringThe EKS addon version of the providerhelp
-pod-identity-http-timeout stringThe HTTP timeout threshold for Pod Identity authentication.help
-provider-volume stringRendezvous directory for provider socket (default "/var/run/secrets-store-csi-providers")help
-qps intMaximum query per second to the Kubernetes API server.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.