hub / github.com/aidanmelen/terraform-aws-eks-auth
github.com/aidanmelen/terraform-aws-eks-auth @1.0.0
Chat with this repo
2 symbols
6 edges
2 files
0 documented · 0%
● updated 2y agov1.0.0 · 2022-04-08★ 372 open issues
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
terraform-aws-eks-auth
A Terraform module to manage cluster authentication for an Elastic Kubernetes (EKS) cluster on AWS.
Assumptions
- You are using the terraform-aws-eks module.
Usage
Grant access to the AWS EKS cluster by adding map_roles, map_user or map_accounts to the aws-auth configmap.
module "eks" {
source = "terraform-aws-modules/eks/aws"
# insert the 15 required variables here
}
module "eks_auth" {
source = "aidanmelen/eks-auth/aws"
eks = module.eks
map_roles = [
{
rolearn = "arn:aws:iam::66666666666:role/role1"
username = "role1"
groups = ["system:masters"]
},
]
map_users = [
{
userarn = "arn:aws:iam::66666666666:user/user1"
username = "user1"
groups = ["system:masters"]
},
{
userarn = "arn:aws:iam::66666666666:user/user2"
username = "user2"
groups = ["system:masters"]
},
]
map_accounts = [
"777777777777",
"888888888888",
]
}
Please see the complete example for more information.
Requirements
| Name | Version |
|---|---|
| terraform | >= 0.14.8 |
| http | >= 2.4.1 |
| kubernetes | >= 2.10.0 |
Providers
| Name | Version |
|---|---|
| http | >= 2.4.1 |
| kubernetes | >= 2.10.0 |
Modules
No modules.
Resources
| Name | Type |
|---|---|
| kubernetes_config_map_v1.aws_auth | resource |
| kubernetes_config_map_v1_data.aws_auth | resource |
| http_http.wait_for_cluster | data source |
Inputs
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| eks | The outputs from the terraform-aws-modules/terraform-aws-eks module. |
any |
n/a | yes |
| map_accounts | Additional AWS account numbers to add to the aws-auth configmap. | list(string) |
[] |
no |
| map_roles | Additional IAM roles to add to the aws-auth configmap. | list(object({ |
rolearn = string
username = string
groups = list(string)
})) | [] | no |
| map_users | Additional IAM users to add to the aws-auth configmap. |
list(object({
userarn = string
username = string
groups = list(string)
}))
| [] | no |
| wait_for_cluster_timeout | A timeout (in seconds) to wait for cluster to be available. | number | 300 | no |
Outputs
| Name | Description |
|---|---|
| aws_auth_configmap_yaml | Formatted yaml output for aws-auth configmap. |
| map_accounts | The aws-auth map accounts. |
| map_roles | The aws-auth map roles merged with the eks managed node group, self managed node groups and fargate profile roles. |
| map_users | The aws-auth map users. |
License
Apache 2 Licensed. See LICENSE for full details.
Core symbols most depended-on inside this repo
—
Shape
Languages
Go100%
Modules by API surface
test/terraform_complete_test.go1 symbols
test/terraform_basic_test.go1 symbols
For agents
$ claude mcp add terraform-aws-eks-auth \
-- python -m otcore.mcp_server <graph>