<p>I noticed that a new cluster role - &quot;eks:cloud-controller-manager&quot;  appeared in our EKS cluster. we never created it.I tried to find origin/creation of this cluster role but not able to find it.</p>
<p>any idea what does &quot;eks:cloud-controller-manager&quot; cluster role does in EKS cluster?</p>
<p><code>$ kubectl get clusterrole eks:cloud-controller-manager -o yaml</code></p>
<pre><code>kind: ClusterRole
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {&quot;apiVersion&quot;:&quot;rbac.authorization.k8s.io/v1&quot;,&quot;kind&quot;:&quot;ClusterRole&quot;,&quot;metadata&quot;:{&quot;annotations&quot;:{},&quot;name&quot;:&quot;eks:cloud-controller-manager&quot;},&quot;rules&quot;:[{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;events&quot;],&quot;verbs&quot;:[&quot;create&quot;,&quot;patch&quot;,&quot;update&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;nodes&quot;],&quot;verbs&quot;:[&quot;*&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;nodes/status&quot;],&quot;verbs&quot;:[&quot;patch&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;services&quot;],&quot;verbs&quot;:[&quot;list&quot;,&quot;patch&quot;,&quot;update&quot;,&quot;watch&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;services/status&quot;],&quot;verbs&quot;:[&quot;list&quot;,&quot;patch&quot;,&quot;update&quot;,&quot;watch&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;serviceaccounts&quot;],&quot;verbs&quot;:[&quot;create&quot;,&quot;get&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;persistentvolumes&quot;],&quot;verbs&quot;:[&quot;get&quot;,&quot;list&quot;,&quot;update&quot;,&quot;watch&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;endpoints&quot;],&quot;verbs&quot;:[&quot;create&quot;,&quot;get&quot;,&quot;list&quot;,&quot;watch&quot;,&quot;update&quot;]},{&quot;apiGroups&quot;:[&quot;coordination.k8s.io&quot;],&quot;resources&quot;:[&quot;leases&quot;],&quot;verbs&quot;:[&quot;create&quot;,&quot;get&quot;,&quot;list&quot;,&quot;watch&quot;,&quot;update&quot;]},{&quot;apiGroups&quot;:[&quot;&quot;],&quot;resources&quot;:[&quot;serviceaccounts/token&quot;],&quot;verbs&quot;:[&quot;create&quot;]}]}
  creationTimestamp: &quot;2022-08-02T00:25:52Z&quot;
  name: eks:cloud-controller-manager
  resourceVersion: &quot;762242250&quot;
  uid: 34e568bb-20b5-4c33-8a7b-fcd081ae0a28
rules:
- apiGroups:
  - &quot;&quot;
  resources:
  - events
  verbs:
  - create
  - patch
  - update
- apiGroups:
  - &quot;&quot;
  resources:
  - nodes
  verbs:
  - '*'
- apiGroups:
  - &quot;&quot;
  resources:
  - serviceaccounts/token
  verbs:
  - create```

I tried to find this object in our Gitops repo but do not find it. 
</code></pre>

<p>This role is created by AWS when you provision the cluster. This role is for the AWS <a href="https://kubernetes.io/docs/concepts/architecture/cloud-controller/" rel="nofollow noreferrer">cloud-controller-manager</a> to integrate AWS services (eg. CLB/NLB, EBS) with Kubernetes. You will also find other roles like eks:fargate-manager to integrate with Fargate.</p>
