File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -132,10 +132,24 @@ jobs:
132132 role-to-assume : arn:aws:iam::484907513542:role/github-actions-oidc-role
133133 aws-region : us-east-1
134134
135+ - name : Install yq
136+ run : |
137+ sudo wget https://github.com/mikefarah/yq/releases/download/v4.15.1/yq_linux_amd64 -O /usr/local/bin/yq
138+ sudo chmod +x /usr/local/bin/yq
139+
135140 - name : Configure Kubernetes Access
136141 run : |
137142 aws eks update-kubeconfig --region us-east-1 --name ${{ needs.apply-terraform.outputs.job_identifier }}
138143
144+ - name : Add new mapRole to aws-auth ConfigMap
145+ if : env.Karpenter_VERSION != 'no_karpenter'
146+ run : |
147+ NEW_MAPROLE='- groups:\n - system:bootstrappers\n - system:nodes\n rolearn: arn:aws:iam::484907513542:role/KarpenterNodeRole-${{ needs.apply-terraform.outputs.job_identifier }}\n username: system:node:{{EC2PrivateDNSName}}'
148+ kubectl get configmap/aws-auth -n kube-system -o yaml > aws-auth.yaml
149+ yq eval '.data.mapRoles |= . + "- groups:\n - system:bootstrappers\n - system:nodes\n rolearn: arn:aws:iam::484907513542:role/KarpenterNodeRole-${{ needs.apply-terraform.outputs.job_identifier }}\n username: system:node:{{EC2PrivateDNSName}}\n"' -i aws-auth.yaml
150+ kubectl apply -f aws-auth.yaml
151+ kubectl get configmap/aws-auth -n kube-system -o yaml
152+
139153 - name : Install Karpenter (if needed)
140154 if : env.Karpenter_VERSION != 'no_karpenter'
141155 run : |
You can’t perform that action at this time.
0 commit comments