Skip to content

Enable role to have system:masters access

I'm upgrading GH Actions workflow to use a role instead of a user following that secure strategy: https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services

The problem is: EKS Auth Sync doesn't add roles based on tags (the same way it does it users) so I'm not able to allow my workflows to do changes inside the cluster.

Screenshot_from_2022-03-30_09-59-38Untitled_Diagram.drawio

Edited by Francisco Cardoso
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information