Skip to content

feat: Allow setting the authentication_mode variable#184

Open
mitch-hamm wants to merge 2 commits intomasterfrom
mh/allow-setting-authentication-mode
Open

feat: Allow setting the authentication_mode variable#184
mitch-hamm wants to merge 2 commits intomasterfrom
mh/allow-setting-authentication-mode

Conversation

@mitch-hamm
Copy link
Copy Markdown
Contributor

@mitch-hamm mitch-hamm commented Apr 16, 2026

Motivation

The aws-auth config map is a legacy feature for cluster authentication. The new approach is outlined and features are described here: https://docs.aws.amazon.com/eks/latest/userguide/access-entries.html#_features
We should allow setting this parameter to have more fine grained control over the migration process from legacy to API control.
The API mode will also give better control to avoid cluster lockouts due to a misconfigured aws-auth config map

As per: https://registry.terraform.io/modules/terraform-aws-modules/eks/aws/20.29.0?tab=inputs

authentication_mode string
Description: The authentication mode for the cluster. Valid values are `CONFIG_MAP`, `API` or `API_AND_CONFIG_MAP`

Default: "API_AND_CONFIG_MAP"

The default is API_AND_CONFIG_MAP

Modifications

Add var for configuration of the authentication_mode and set the default as API_AND_CONFIG_MAP

Verifying this change

  • Make sure that the change passes the CI checks.

This change added tests and can be verified as follows:

  • Create a cluster with auth mode set to API_AND_CONFIG_MAP and switch after creation to API
  • Create a cluster with auth mode set to API and verify successful creation and functionality

Documentation

Check the box below.

Need to update docs?

  • doc-required

    (If you need help on updating docs, create a doc issue)

  • no-need-doc

    (Please explain why)

  • doc

    (If this PR contains doc changes)

@mitch-hamm mitch-hamm requested a review from a team as a code owner April 16, 2026 22:19
@github-actions
Copy link
Copy Markdown
Contributor

@mitch-hamm:Thanks for your contribution. For this PR, do we need to update docs?
(The PR template contains info about doc, which helps others know more about the changes. Can you provide doc-related info in this and future PR descriptions? Thanks)

@github-actions github-actions Bot added the doc-info-missing This pr needs to mark a document option in description label Apr 16, 2026
@github-actions github-actions Bot removed the doc-info-missing This pr needs to mark a document option in description label Apr 16, 2026
@github-actions
Copy link
Copy Markdown
Contributor

@mitch-hamm:Thanks for providing doc info!

@github-actions github-actions Bot added the doc This pr contains a document label Apr 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

doc This pr contains a document

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant