Technical manual
...
iR Engine on AWS
EKS User Access
1 min
grant eksuser access to cluster by default, only the iam user who set up an eks cluster may access it in order to let other users access the cluster, you must apply an aws auth configmap to the cluster granting access to specific iam users a template of aws auth template yml https //github com/ir engine/ir engine ops/blob/master/configs/aws auth template yml file can be found in ir engine ops https //github com/ir engine/ir engine ops/ repo you'll need to provide a few values for this file to find \<rolearn> , in aws go to eks >clusters > \<your cluster> >compute >select a nodegroup in the details should be 'node iam role arn'; copy this and replace \<rolearn> in the aws auth file \<account id> is the id of your aws account; in the upper right corner of the aws client should be \<your username>@\<abcd 1234 efgh> the 12 character string after the @ is the account id make sure to remove the 's from the account id when pasting it in \<iam username> is the username of the iam user you want to give access, e g eksuser you can add multiple users by copying the groups section under mapusers , e g mapusers | \ groups \ system\ masters userarn arn\ aws\ iam abcd1234efgh\ user/eksuser username eksuser \ groups \ system\ masters userarn arn\ aws\ iam acbd1234efgh\ user/fsmith username fsmith when the aws auth config file is filled in, just run kubectl apply f path/to/aws auth yml