MapRoles:

Official example:

mapRoles: |
- groups:
  - system:bootstrappers
  - system:nodes
  rolearn: arn:aws:iam::111122223333:role/my-node-role
  username: system:node:Template:EC2PrivateDNSName

mapUsers: |
 - userarn: arn:aws:iam::XXXXXXXXXXXX:user/your-aws-user
   username: your-k8s-new-user-with-master-privileges
   groups:
     - system:masters

mapRoles: |
 - rolearn: arn:aws:iam::XXXXXXXXXXXX:role/your-aws-role
   username: your-new-k8s-user-with-master
   groups:
     - system:masters

inputs = {

aws_auth_extra_roles = <<-EOF
mapUsers: |
 - userarn: arn:aws:iam::XXXXXXXXXXXX:user/your-aws-user
   username: your-k8s-new-user-with-master-privileges
   groups:
     - system:masters
 EOF
}

Related

• mapAccounts:

See also

• mapUsers:, mapRoles:, mapAccounts:
• AWS IAM Authenticator for Kubernetes: aws-auth, kubectl edit -n kube-system configmap/aws-auth, eksctl create iamidentitymapping, mapUsers:, mapRoles:, mapAccounts:

https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html