- Create the user with command line access
- Assign the user to the
admin/viewer
iam group - Send corresponding role arn to the user
- User assumes the role and updates its local
.kube/config
file
Validate if you can assume the target role.
aws sts assume-role --role-arn ROLE-ARN --role-session-name SOME-NAME --profile BASE-PROFILE
Create new profile manually in .aws/config
from your base user credentials.
[profile PROFILE-NAME]
source_profile = BASE-PROFILE
role_arn = ROLE-ARN
Update local kube config file.
aws eks update-kubeconfig --name demo --region eu-west-1 --profile PROFILE-NAME