resource "kubernetes_config_map" "aws-auth" {
  data = {
    "mapRoles" = <<EOT
      - rolearn: arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role
        username: system:node:{{EC2PrivateDNSName}}
        groups:
          - system:bootstrappers
          - system:nodes
      - rolearn: arn:aws:iam::476717493283:user/ccshr-eks-admin
        username: EKSAdmin
        groups:
          - system:masters
      - rolearn: arn:aws:iam::554998489284:role/ampp-amp-eks-developer
        username: dev-ro
        groups:
          - system:masters
      - rolearn: arn:aws:iam::887829410671:role/ampd-github-actions-role
        username: ampd-github-actions-role
        groups:
          - system:masters
    EOT

    "mapUsers" = <<-EOT
      - userarn: arn:aws:iam::476717493283:user/clshrd-jenkins
        username: clshrd-jenkins
        groups:
          - system:masters
      - userarn: arn:aws:iam::554998489284:user/ampp-jenkins
        username: jenkins
        groups:
          - system:masters
    EOT
  }

  metadata {
    name      = "aws-auth"
    namespace = "kube-system"
  }
}