<p>I'm trying to configure AWS sso access my EKS clusters that are in a child account that I'm an admin to.  I'm referencing <a href="https://www.powerupcloud.com/aws-eks-authentication-and-authorization-using-aws-single-signon/" rel="nofollow noreferrer">this document</a> and <a href="https://stackoverflow.com/questions/65660833/aws-eks-and-aws-sso-rbac-authentication-problem">this stack posting</a>. But keep getting RBAC errors when I log in with SSO to the child account.  How do I properly configure this?  I still have IAM access enabled at the moment.</p>
<p>Error in console:</p>
<pre><code>Your current user or role does not have access to Kubernetes objects on this EKS cluster
This may be due to the current user or role not having Kubernetes RBAC permissions to describe cluster resources or not having an entry in the cluster’s auth config map.
</code></pre>
<p>Roles:</p>
<pre><code> apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: default:sso-admin
   namespace: default
 rules:
 - apiGroups: [&quot;*&quot;]
   resources: [&quot;*&quot;]
   verbs: [&quot;*&quot;]
</code></pre>
<p>ConfigMap:</p>
<pre><code>apiVersion: v1
kind: ConfigMap
metadata:
  name: aws-auth
  namespace: kube-system
data:
  mapUsers: |
    -  rolearn: arn:aws:iam::xxxxx:role/AWSReservedSSOxxxxx
       username: me:{{SessionName}}
       groups:
          - default:sso-admin
</code></pre>

risail
<p>A solution for this issue is well described in the official docs:</p>
<p><a href="https://aws.amazon.com/premiumsupport/knowledge-center/eks-kubernetes-object-access-error/" rel="nofollow noreferrer">How do I resolve the &quot;Your current user or role does not have access to Kubernetes objects on this EKS cluster&quot; error in Amazon EKS?</a></p>
<blockquote>
<p><strong>Short description</strong></p>
<p>You receive this error when you use the AWS Management Console with an
AWS Identity and Access Management (IAM) role or user that's not in
your Amazon EKS cluster's aws-auth ConfigMap.</p>
<p>When you create an Amazon EKS cluster, the IAM user or role (such as a
federated user that creates the cluster) is automatically granted
system:masters permissions in the cluster's RBAC configuration. If you
access the Amazon EKS console and your IAM user or role isn't part of
the aws-auth ConfigMap, then you can't see your Kubernetes workloads
or overview details for the cluster.</p>
<p>To grant additional AWS users or roles the ability to interact with
your cluster, you must edit the aws-auth ConfigMap within Kubernetes.</p>
<p><strong>Resolution</strong></p>
<p>Note: If you receive errors when running AWS Command Line Interface
(AWS CLI) commands, make sure that you’re using the most recent AWS
CLI version.</p>
</blockquote>
<p>You can follow the steps described there in order to solve your problem.</p>
