2021-12-01 12:33:11 +00:00
|
|
|
{{- if .Values.api.awsIamAuth.enabled }}
|
2021-03-11 08:00:47 +00:00
|
|
|
# Controller role for consistency, similar to kubeadm admin.conf
|
2021-02-12 11:04:16 +00:00
|
|
|
apiVersion: iamauthenticator.k8s.aws/v1alpha1
|
|
|
|
|
kind: IAMIdentityMapping
|
|
|
|
|
metadata:
|
2021-03-17 16:29:44 +00:00
|
|
|
name: kubezero-worker-nodes
|
2021-02-12 11:04:16 +00:00
|
|
|
spec:
|
2021-12-01 12:33:11 +00:00
|
|
|
arn: {{ .Values.api.awsIamAuth.workerNodeRole }}
|
2021-03-17 16:29:44 +00:00
|
|
|
username: system:node:{{ "{{" }}EC2PrivateDNSName{{ "}}" }}
|
2021-02-12 11:04:16 +00:00
|
|
|
groups:
|
2021-03-17 16:29:44 +00:00
|
|
|
# For now use masters, define properly with 1.20
|
2021-02-12 11:04:16 +00:00
|
|
|
- system:masters
|
2021-03-17 16:29:44 +00:00
|
|
|
- system:nodes
|
|
|
|
|
- system:bootstrappers
|
2021-02-12 11:04:16 +00:00
|
|
|
---
|
|
|
|
|
# Admin Role for remote access
|
|
|
|
|
apiVersion: iamauthenticator.k8s.aws/v1alpha1
|
|
|
|
|
kind: IAMIdentityMapping
|
|
|
|
|
metadata:
|
|
|
|
|
name: kubernetes-admin
|
|
|
|
|
spec:
|
2021-12-01 12:33:11 +00:00
|
|
|
arn: {{ .Values.api.awsIamAuth.kubeAdminRole }}
|
2021-02-12 11:04:16 +00:00
|
|
|
username: kubernetes-admin
|
|
|
|
|
groups:
|
|
|
|
|
- system:masters
|
2021-02-22 13:41:32 +00:00
|
|
|
{{- end }}
|
