config aws auth

EnAccess · Dec 18, 2024 · 8f343dc · 8f343dc
1 parent c932e8b
commit 8f343dc
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -73,3 +73,4 @@ dist/
 
 ## secret file
 *-secrets.yaml
+aws-auth.yaml
diff --git a/k8s/configmaps/aws-auth.yaml.example b/k8s/configmaps/aws-auth.yaml.example
@@ -0,0 +1,21 @@
+apiVersion: v1
+data:
+  mapRoles: |
+    - groups:
+      - system:bootstrappers
+      - system:nodes
+      rolearn: arn:aws:iam::<AWS_ACCOUNT_ID>:role/<EKS_NODE_INSTANCE_ROLENAME>
+      username: system:node:{{EC2PrivateDNSName}}
+  mapUsers: |
+    - userarn: arn:aws:iam::<AWS_ACCOUNT_ID>:user/user1
+      username: user1
+      groups:
+        - system:masters
+    - userarn: arn:aws:iam::<AWS_ACCOUNT_ID>:user/user2
+      username: user2
+      groups:
+        - system:masters
+kind: ConfigMap
+metadata:
+  name: aws-auth
+  namespace: kube-system
Original file line number	Diff line number	Diff line change
Expand Up		@@ -73,3 +73,4 @@ dist/

		## secret file
		*-secrets.yaml
		aws-auth.yaml