Difference between revisions of "MapRoles:"
Jump to navigation
Jump to search
↑ https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html
| (One intermediate revision by the same user not shown) | |||
| Line 10: | Line 10: | ||
username: [[system:node]]:<nowiki>{{EC2PrivateDNSName}}</nowiki> | username: [[system:node]]:<nowiki>{{EC2PrivateDNSName}}</nowiki> | ||
| − | + | == Examples == | |
{{MapUsers and mapRoles}} | {{MapUsers and mapRoles}} | ||
| − | |||
| Line 21: | Line 20: | ||
== Related == | == Related == | ||
* <code>[[mapAccounts:]]</code> | * <code>[[mapAccounts:]]</code> | ||
| + | * <code>[[Error: reading inline policies for IAM]]</code> | ||
== See also == | == See also == | ||
Latest revision as of 15:13, 21 December 2023
Official example[1]:
mapRoles: | - groups: - system:bootstrappers - system:nodes rolearn: arn:aws:iam::111122223333:role/my-node-role username: system:node:{{EC2PrivateDNSName}}
Examples[edit]
mapUsers: | - userarn: arn:aws:iam::XXXXXXXXXXXX:user/your-aws-user username: your-k8s-new-user-with-master-privileges groups: - system:masters mapRoles: | - rolearn: arn:aws:iam::XXXXXXXXXXXX:role/your-aws-role username: your-new-k8s-user-with-master groups: - system:masters
inputs = { aws_auth_extra_roles = <<-EOF mapUsers: | - userarn: arn:aws:iam::XXXXXXXXXXXX:user/your-aws-user username: your-k8s-new-user-with-master-privileges groups: - system:masters EOF }
Related[edit]
See also[edit]
mapUsers:, mapRoles:, mapAccounts:- AWS IAM Authenticator for Kubernetes:
aws-auth, kubectl edit -n kube-system configmap/aws-auth, eksctl create iamidentitymapping,mapUsers:, mapRoles:, mapAccounts:
Advertising:
