Suppose we have a kubernetes stack running on AWS and we would like to config our component directly via kubernetes chart files to be able to provision some AWS services (for example a DynamoDB table).
What would be the best practice if we want to achieve this and hopefully also allow our kubernetes component can connect to the provisioned services via IAM way (not just using simple key secret pairs)
So once achieve that, one can let a kubernetes component has a char file such as:
apiVersion: alpha1/v1
Kind: Database
type: dynamodb
table_name: a_test_table
hash_key: some_id
range_key: some_orderThen when deploying this component onto Kubernetes stacks, it will provision a DynamoDB table with name a_test_table for this service to be successfully connected onto.
What you are describing here is more or less what the AWS Service Broker is trying to achieve. Using the Open Service Broker API, the AWS broker would react to the creation of specific kubernetes objects, creating the required resources on AWS. Here you can find an AWS post explaining how this works.
There are different brokers for different cloud providers, not just AWS.