apiVersion: v1
kind: ConfigMap
metadata:
  name: aws-auth
  namespace: kube-system
data:
  mapRoles: |
    - rolearn: arn:aws:iam::363792739418:role/tf-eks-dev-airflow-node
      username: system:node:{{EC2PrivateDNSName}}
      groups:
        - system:bootstrappers
        - system:nodes
  mapUsers: | # add more stuff here, then tie to RBAC
    - userarn: arn:aws:iam::363792739418:user/mb-test-eks-admin
      username: eks-root-admin
      groups:
        - kube-root-admins
    - userarn: arn:aws:iam::363792739418:user/mb-test-eks-viewer
      username: eks-viewer
      groups:
        - kube-viewers
    - userarn: arn:aws:iam::363792739418:user/mb-test-eks-admin
      username: eks-editor
      groups:
        - kube-editors
    - userarn: arn:aws:iam::363792739418:user/mb-test-eks-admin
      username: eks-dev-admin
      groups:
        - kube-dev-admin
