mapRoles:

mapUsers: |
 - userarn: arn:aws:iam::XXXXXXXXXXXX:user/your-aws-user
   username: your-k8s-new-user-with-master-privileges
   groups:
     - system:masters

mapRoles: |
 - rolearn: arn:aws:iam::XXXXXXXXXXXX:role/your-aws-role
   username: your-new-k8s-user-with-master
   groups:
     - system:masters

inputs = {

aws_auth_extra_roles = <<-EOF
mapUsers: |
 - userarn: arn:aws:iam::XXXXXXXXXXXX:user/your-aws-user
   username: your-k8s-new-user-with-master-privileges
   groups:
     - system:masters
 EOF
}

See also

• AWS IAM Authenticator for Kubernetes: aws-auth, kubectl edit -n kube-system configmap/aws-auth, eksctl create iamidentitymapping, mapUsers:, mapRoles:, mapAccounts:
• Kubernetes RBAC kubectl auth, kubectl auth can-i, kubectl auth reconcile kubectl create [ role | clusterrole | clusterrolebinding | rolebinding | serviceaccount ], groups:, Kubernetes RBAC good practices, kube2iam, K8s Cluster roles, rbac.authorization.k8s.io, system: