client.authentication.k8s.io

apiVersion: client.authentication.k8s.io/v1beta1
apiVersion: client.authentication.k8s.io/v1alpha1
authentication.k8s.io/v1

 provider "kubernetes" {
  host                   = var.cluster_endpoint
  cluster_ca_certificate = base64decode(var.cluster_ca_cert)
  exec {
    api_version = "client.authentication.k8s.io/v1alpha1"
    args        = ["eks", "get-token", "--cluster-name", var.cluster_name]
    command     = "aws"
  }
}

 provider "helm" {
 kubernetes {
   host                   = module.eks.cluster_endpoint
   cluster_ca_certificate = base64decode(module.eks.cluster_certificate_authority_data)

   exec {
     api_version = "client.authentication.k8s.io/v1beta1"
     command     = "aws"
     # This requires the awscli to be installed locally where Terraform is executed
     args = ["eks", "get-token", "--cluster-name", module.eks.cluster_name]
   }
 }
}

~/.kube/config
exec:
kind: ExecCredential
kind: Config
aws eks get-token

See also

• client.authentication.k8s.io, /v1alpha1, /v1beta1
• authentication.k8s.io, client.authentication.k8s.io
• Kubernetes API, Kubernetes API server, EKS API, apiVersion:, kubectl api-resources, kubectl api-versions, kind:, Kubernetes API endpoint, 6443, 10250 (kubelet) kube-apiserver, /etc/kubernetes/manifests/kube-apiserver.yaml, valueFrom, /var/log/kube-apiserver.log, /api/v1/, k8s.io
• kubectl config [ view | get-contexts | current-context | get-clusters | set-context | set-credentials ], ~/.kube/config, kubectl config --help, kubectx, Kubernetes contexts, KUBECONFIG, kubectl --kubeconfig