Kubectl describe -n kube-system configmap/aws-auth

kubectl describe -n kube-system configmap/aws-auth

Official example

Name:         aws-auth
Namespace:    kube-system
Labels:       <none>
Annotations:  <none> 

Data
====
mapRoles:
----
- groups:
  - system:bootstrappers
  - system:nodes
  rolearn: arn:aws:iam::111122223333:role/my-node-role
  username: system:node:{{EC2PrivateDNSName}}
 

BinaryData
==== 

Events:  <none>

Examples

kubectl describe -n kube-system configmap/aws-auth
Name:         aws-auth
Namespace:    kube-system
Labels:       <none>
Annotations:  <none>

Data
====
mapAccounts:
----
[]

mapRoles:
----
- "groups":
  - "system:bootstrappers"
  - "system:nodes"
  "rolearn": "arn:aws:iam::0987654321:role/my-eks-node-group-3211231231232132"
  "username": "system:node:{{EC2PrivateDNSName}}"
- "groups":
  - "system:masters"
  - "eks-console-dashboard-full-access-group"
  "rolearn": "arn:aws:iam::0987654321:role/PING-support-adm"

mapUsers:
----
[]

BinaryData
==== 

Events:  <none>

Errors

kubectl describe -n kube-system configmap/aws-auth
error: You must be logged in to the server (Unauthorized)

Activities

• Read https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html
• Enabling IAM principal access to your cluster

Related

• kubectl get roles -A
• Enabling IAM user and role access to your cluster

See also

• AWS IAM Authenticator for Kubernetes: aws-auth, kubectl edit -n kube-system configmap/aws-auth, eksctl create iamidentitymapping, mapUsers:, mapRoles:, mapAccounts: