kops-iam-authenticator-config

cloudposse/kops-iam-authenticator-config/aws

Terraform Module HCL AWS

Terraform module to create and apply a Kubernetes ConfigMap for aws-iam-authenticator to be used with Kops to map IAM principals to Kubernetes users

Install

module "kops-iam-authenticator-config" {

source = "cloudposse/kops-iam-authenticator-config/aws"

version = "0.2.2"

}

plain text: /constructs/tfmod-cloudposse-kops-iam-authenticator-config-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

[![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) terraform-aws-kops-iam-authenticator-config ![Build Status](https://travis-ci.org/cloudposse/terraform-aws-kops-iam-authenticator-config) ![Latest Release](https://github.com/cloudposse/terraform-aws-kops-iam-authenticator-config/releases/latest) ![Slack Community](https://slack.cloudposse.com) Terraform module to create and apply a Kubernetes ConfigMap to map AWS IAM roles to Kubernetes users/groups. This will configure clusters managed by kops to use aws-iam-authenticator, allowing to use AWS IAM credentials to authenticate to a Kubernetes cluster. --- This project is part of our comprehensive "SweetOps" approach towards DevOps. [ ][share_email] [ ][share_googleplus] [ ][share_faceb

Inputs (9)

Name	Type	Description	Default
admin_k8s_username	string	Kubernetes admin username to be mapped to `admin_iam_role_arn`	`""`
admin_k8s_groups	list	List of Kubernetes groups to be mapped to `admin_iam_role_arn`	`[]`
readonly_iam_role_arn	string	IAM Role with readonly permissions to map to `readonly_k8s_username`	`""`
readonly_k8s_username	string	Kubernetes readonly username to be mapped to `readonly_iam_role_arn`	`""`
readonly_k8s_groups	list	List of Kubernetes groups to be mapped to `readonly_iam_role_arn`	`[]`
enabled	string	Set to true to enable the module, otherwise it will not create any resources	`"false"`
admin_iam_role_arn	string	IAM Role with admin permissions to map to `admin_k8s_username`	`""`
cluster_id	string	A unique-per-cluster identifier to prevent replay attacks. Good choices are a ra	`"random"`
kube_config_path	string	Path to the kube config file. Can be sourced from `KUBE_CONFIG` or `KUBECONFIG`	`""`