Archive Notice

The terraform-aws-modules/eks/aws v.18.20.0 release has brought back support aws-auth configmap! For this reason, I highly encourage users to manage the aws-auth configmap with the EKS module.

You are welcome to open an issue here if you are having trouble with the migration steps below and will do my best to help.

Migration:

steps

1. Remove the aidanmelen/eks-auth/aws declaration for your terraform code.
2. Remove the aidanmelen/eks-auth/aws resources from terraform state.

• The aws-auth configmap should still exist on the cluster but will no longer be managed by this module.
• A plan should show that there are no infrastructure changes to the EKS cluster.

3. Upgrade the version of the EKS module: version = ">= v18.20.0"
4. Configure the terraform-aws-modules/eks/aws with manage_aws_auth_configmap = true. This version of the EKS module uses the new kubernetes_config_map_v1_data resource to patch aws-auth configmap data (just like the v1.0.0 version of this module).
5. Plan and Apply.

• The aws-auth configmap should now be managed by the EKS module.

Please see the complete example for more information.

terraform-aws-eks-auth

A Terraform module to manage cluster authentication for an Elastic Kubernetes (EKS) cluster on AWS.

Assumptions

• You are using the terraform-aws-eks module.

Usage

Grant access to the AWS EKS cluster by adding map_roles, map_user or map_accounts to the aws-auth configmap.

module "eks" {
  source = "terraform-aws-modules/eks/aws"
  # insert the 15 required variables here
}

module "eks_auth" {
  source = "aidanmelen/eks-auth/aws"
  eks    = module.eks

  map_roles = [
    {
      rolearn  = "arn:aws:iam::66666666666:role/role1"
      username = "role1"
      groups   = ["system:masters"]
    },
  ]

  map_users = [
    {
      userarn  = "arn:aws:iam::66666666666:user/user1"
      username = "user1"
      groups   = ["system:masters"]
    },
    {
      userarn  = "arn:aws:iam::66666666666:user/user2"
      username = "user2"
      groups   = ["system:masters"]
    },
  ]

  map_accounts = [
    "777777777777",
    "888888888888",
  ]
}

Please see the complete example for more information.

Requirements

Providers

Modules

No modules.

Resources

Inputs

list(object({
    rolearn  = string
    username = string
    groups   = list(string)
  }))

list(object({
    userarn  = string
    username = string
    groups   = list(string)
  }))

Outputs

License

Apache 2 Licensed. See LICENSE for full details.