I am trying to add federated user to EKS cluster. So far I was able to add the IAM users to the cluster by adding them to configmap/aws-auth and adding clusterrolebinding. But i could not able to understand how to give access to the users who use SSO.
I tried to add the user in mapRoles by giving the roleARN with which users are getting authenticated from the identity provider. Here is the sample one i have added
- groups:
- cluster-admin
- system:masters
rolearn: arn:aws:iam::345XXXXXXXX:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AdministratorAccess_c3faf862c9becba7
username: Vivek.Kella@XXXXX.com