terraform-aws-eks/modules/aws-auth/README.md

aws-auth Module

Configuration in this directory creates/updates the aws-auth ConfigMap.

module "eks" {
  source  = "terraform-aws-modules/eks/aws//modules/aws-auth"
  version = "~> 20.0"

  manage_aws_auth_configmap = true

  aws_auth_roles = [
    {
      rolearn  = "arn:aws:iam::66666666666:role/role1"
      username = "role1"
      groups   = ["system:masters"]
    },
  ]

  aws_auth_users = [
    {
      userarn  = "arn:aws:iam::66666666666:user/user1"
      username = "user1"
      groups   = ["system:masters"]
    },
    {
      userarn  = "arn:aws:iam::66666666666:user/user2"
      username = "user2"
      groups   = ["system:masters"]
    },
  ]

  aws_auth_accounts = [
    "777777777777",
    "888888888888",
  ]
}

Usage

Requirements

Name	Version
terraform	>= 1.3
kubernetes	>= 2.20

Providers

Name	Version
kubernetes	>= 2.20

Modules

No modules.

Resources

Name	Type
kubernetes_config_map.aws_auth	resource
kubernetes_config_map_v1_data.aws_auth	resource

Inputs

Name	Description	Type	Default	Required
aws_auth_accounts	List of account maps to add to the aws-auth configmap	list(any)	[]	no
aws_auth_roles	List of role maps to add to the aws-auth configmap	list(any)	[]	no
aws_auth_users	List of user maps to add to the aws-auth configmap	list(any)	[]	no
create	Controls if resources should be created (affects all resources)	bool	true	no
create_aws_auth_configmap	Determines whether to create the aws-auth configmap. NOTE - this is only intended for scenarios where the configmap does not exist (i.e. - when using only self-managed node groups). Most users should use manage_aws_auth_configmap	bool	false	no
manage_aws_auth_configmap	Determines whether to manage the aws-auth configmap	bool	true	no

Outputs

No outputs.