<p>I am a junior developer studying eks.</p>
<p>When you create eks, you can see that the IAM user used to create it is granted as system:master.</p>
<p>I can't find how system:master is specified</p>
<p>I can't see the contents of IAM in the generated aws-auth configmap of Kubernetes.</p>
<p>Can you find out which part to look for?</p>
<p>Started out of curiosity and still looking:(</p>
<p>please help i've been looking all day</p>

<p><code>I can't find how system:master is specified</code></p>
<p>system:masters is a logical group <a href="https://github.com/kubernetes/kubernetes/blob/master/pkg/registry/rbac/escalation_check.go#L38" rel="nofollow noreferrer">defined</a> in kubernetes source. This is not something created by EKS or yourself.</p>
<p><code>see the contents of IAM in the generated aws-auth configmap</code></p>
<p>kubectl get configmap aws-auth --namespace kube-system --output yaml</p>
<p>Try this <a href="https://medium.com/the-programmer/aws-eks-fundamentals-core-components-for-absolute-beginners-part1-9b16e19cedb3" rel="nofollow noreferrer">beginner guide</a>.</p>
