Skip to content

Commit 978ca60

Browse files
mselim00ndbaker1cartermckinnon
authored
docs: update InstanceIdNodeName doc to recommend access entries (#2392)
* chore: update InstanceIdNodeName doc to recommend access entries * Update nodeadm/doc/examples.md Co-authored-by: Nick Baker <ndbaker1@outlook.com> * Update nodeadm/doc/examples.md Co-authored-by: Carter <cartermckinnon@gmail.com> --------- Co-authored-by: Nick Baker <ndbaker1@outlook.com> Co-authored-by: Carter <cartermckinnon@gmail.com>
1 parent ff03e27 commit 978ca60

File tree

1 file changed

+7
-6
lines changed

1 file changed

+7
-6
lines changed

nodeadm/doc/examples.md

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -73,14 +73,15 @@ There are several benefits of doing this:
7373
### To enable this feature, you will need to:
7474
1. [Create a new worker node IAM role](https://docs.aws.amazon.com/eks/latest/userguide/create-node-role.html#create-worker-node-role)
7575
- ⚠️ **Note**: you should create a new role when migrating an existing cluster to avoid authentication failures on existing nodes.
76-
2. [Update the `aws-auth` ConfigMap with above created role](https://docs.aws.amazon.com/eks/latest/userguide/auth-configmap.html#aws-auth-users). For example:
76+
2. Configure authorization for the role using username `system:node:{{SessionName}}`, for example by [creating an access entry](https://docs.aws.amazon.com/eks/latest/userguide/creating-access-entries.html) of type `EC2` for the new role:
77+
- ⚠️ **Note**: you can still use the [legacy `aws-auth` ConfigMap](https://docs.aws.amazon.com/eks/latest/userguide/auth-configmap.html#aws-auth-users) to grant access, but services like [EKS Managed Node Groups](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html) will require the use of access entries.
7778
```
78-
- groups:
79-
- system:bootstrappers
80-
- system:nodes
81-
rolearn: $ROLE_CREATED_ABOVE
82-
username: system:node:{{SessionName}}
79+
aws eks create-access-entry \
80+
--cluster-name $CLUSTER_NAME \
81+
--principal-arn $ROLE_CREATED_ABOVE \
82+
--type EC2
8383
```
84+
8485
3. Enable the feature gate in your user data:
8586
```
8687
---

0 commit comments

Comments
 (0)