Removing dependency on Authenticator binary (awslabs#440)

OpenGov · Mar 27, 2020 · 4e0e916 · 4e0e916
1 parent ff69078
commit 4e0e916
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 6 deletions.
diff --git a/files/kubelet-kubeconfig b/files/kubelet-kubeconfig
@@ -16,10 +16,14 @@ users:
   user:
     exec:
       apiVersion: client.authentication.k8s.io/v1alpha1
-      command: /usr/bin/aws-iam-authenticator
+      command: aws
+      env:
+        - name: AWS_STS_REGIONAL_ENDPOINTS
+          value: regional
       args:
-        - "token"
-        - "-i"
-        - "CLUSTER_NAME"
+        - eks
         - --region
-        - "AWS_REGION"
+        - "AWS_REGION"
+        - get-token
+        - --cluster-name
+        - "CLUSTER_NAME"
diff --git a/scripts/install-worker.sh b/scripts/install-worker.sh
@@ -167,7 +167,6 @@ S3_PATH="s3://$BINARY_BUCKET_NAME/$KUBERNETES_VERSION/$KUBERNETES_BUILD_DATE/bin
 
 BINARIES=(
     kubelet
-    aws-iam-authenticator
 )
 for binary in ${BINARIES[*]} ; do
     if [[ ! -z "$AWS_ACCESS_KEY_ID" ]]; then