Amazon EKS now supports multiple external OIDC identity providers per cluster
Amazon Elastic Kubernetes Service (Amazon EKS) now supports multiple external OpenID Connect (OIDC) identity providers per cluster. You can associate up to 10 OIDC identity providers with a single cluster, giving you more flexibility in how you authenticate users and workloads to your Kubernetes clusters.
Many organizations use different identity providers for different user populations, such as employees, contractors, and CI/CD systems. You can now associate each of these providers directly with your cluster, without consolidating users into a single provider or running an intermediary identity broker. Each provider is configured and managed independently, so each population authenticates through its own provider and identity mapping. Your existing IAM authentication continues to work alongside every configured provider. You add each provider the same way as before, using the Amazon Web Services Management Console or the AssociateIdentityProviderConfig API through the Amazon Web Services Command Line Interface and Amazon Web Services SDKs.
This capability is available at no additional cost in Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. To learn more, see Grant users access to Kubernetes with an external OIDC provider in the Amazon EKS User Guide.