in cmd/resource/k8sauth.go [327:358]
func updateIamAuth(sess *session.Session, svc eksiface.EKSAPI, model *Model) error {
// Add caller to authmap, so that we have permissions to perform updates to auth map.
authMap := &IamAuthMap{}
authMap, err := authMap.addCaller(sess)
if err != nil {
return err
}
// add iam entities from model
authMap = authMap.addFromModel(model)
if isPrivate(model) {
resp, err := invokeLambda(sess, lambda.New(sess), model.Name, authMap, UpdateAction)
if err != nil {
return err
}
log.Println(resp)
} else {
// get kubernetes api client
clientset, err := CreateKubeClientEks(sess, svc, model.Name)
if err != nil {
return err
}
// create aws-auth configmap
err = authMap.PushConfigMap(clientset)
if err != nil {
return err
}
}
return nil
}