aws-iam-authenticator(콘솔전용 인증)

먼저 kubeconfig를 합니다.

aws eks --region ap-northeast-2 update-kubeconfig --name wsi-eks-cluster

iam-authenticator설치합니다.

curl -o aws-iam-authenticator https://s3.us-west-2.amazonaws.com/amazon-eks/1.21.2/2021-07-05/bin/linux/amd64/aws-iam-authenticator
chmod +x ./aws-iam-authenticator
mkdir -p $HOME/bin && cp ./aws-iam-authenticator $HOME/bin/aws-iam-authenticator && export PATH=$PATH:$HOME/bin
echo 'export PATH=$PATH:$HOME/bin' >> ~/.bashrc
aws-iam-authenticator help

설정(Root 계정)

export AWS_ACCESS_KEY_ID=AKIAZ42E7S3RFS42WUME
export AWS_SECRET_ACCESS_KEY=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
aws sts get-caller-identity #Root 계정 설정 확인

토큰 가져오기

aws-iam-authenticator token -i wsi-eks-cluster

• “token” : “여기서부터 복사합니다”
  

토큰 사용해서 EKS Cluster 인증 하기

aws-iam-authenticator token -i k8s-aws-v1.aHR0cHM6Ly9zdHMuYXAtbm9ydGhlYXN0LTIuYW1hem9uYXdzLmNvbS8_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 -i wsi-cluster

kubectl get nodes로 명령 확인

kubectl get nodes