IAM Authentication | EKS Anywhere

May 2024 · 2 minute read

EKS Anywhere cluster yaml specification AWS IAM Authenticator reference

AWS IAM Authenticator support (optional)

Provider support details

vSphereBare MetalNutanixCloudStackSnow
Supported?

EKS Anywhere can create clusters that support AWS IAM Authenticator-based api server authentication. In order to add IAM Authenticator support, you need to configure your cluster by updating the configuration file before creating the cluster. This is a generic template with detailed descriptions below for reference:

apiVersion: anywhere.eks.amazonaws.com/v1alpha1 kind: Cluster metadata:  name: my-cluster-name spec:  ...  # IAM Authenticator support  identityProviderRefs:  - kind: AWSIamConfig  name: aws-iam-auth-config --- apiVersion: anywhere.eks.amazonaws.com/v1alpha1 kind: AWSIamConfig metadata:  name: aws-iam-auth-config spec:  awsRegion: ""  backendMode:  - ""  mapRoles:  - roleARN: arn:aws:iam::XXXXXXXXXXXX:role/myRole  username: myKubernetesUsername  groups:  - ""  mapUsers:  - userARN: arn:aws:iam::XXXXXXXXXXXX:user/myUser  username: myKubernetesUsername  groups:  - ""  partition: "" 

identityProviderRefs (Under Cluster)

List of identity providers you want configured for the Cluster. This would include a reference to the AWSIamConfig object with the configuration below.

awsRegion (required)

backendMode (required)

partition

ncG1vNJzZmiZnq7EqbHRnmWeo6Njrq6t2ailmq%2BjY7CwuY6dppyrX5yytcDIp55mq6SWv7Wxw2imqayZpLuiuI6imKaZpam1cA%3D%3D