Quick Fix – AWS Console – Current user or role does not have access to Kubernetes objects on this EKS Cluster
Tags: kubernetes, aws, console, eks
Published: 2022-02-03 00:02:52

---
title: Quick Fix – AWS Console – Current user or role does not have access to Kubernetes objects on this EKS Cluster
published: true
date: 2022-01-25 13:30:41 UTC
tags: Kubernetes,AWS,Console,EKS
canonical_url: https://veducate.co.uk/aws-console-permission-eks-cluster/#utm_source=rss&utm_medium=rss&utm_campaign=aws-console-permission-eks-cluster
---

###### The Issue

Once you’ve deployed an EKS cluster, and try to view this in the AWS Console, you are presenting the following message:

```
Your current user or role does not have access to Kubernetes objects on this EKS Cluster
```

[![AWS Console - Container Services - Current user or role does not have access to Kubernetes objects on this EKS Cluster](https://i2.wp.com/veducate.co.uk/wp-content/uploads/2022/01/AWS-Console-Container-Services-Current-user-or-role-does-not-have-access-to-Kubernetes-objects-on-this-EKS-Cluster.jpg?resize=604%2C218&ssl=1)](https://i2.wp.com/veducate.co.uk/wp-content/uploads/2022/01/AWS-Console-Container-Services-Current-user-or-role-does-not-have-access-to-Kubernetes-objects-on-this-EKS-Cluster.jpg?ssl=1)

###### The Cause

This is because you need to run some additional configuration on your cluster to allow your AWS user IAM to access the cluster.

- AWS EKS Docs – [Enabling IAM user and role access to your cluster](https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html)

###### The Fix

Grab your User ARN from the Identity and Access Management (IAM) page.

[![aws console - user IAM](https://i1.wp.com/veducate.co.uk/wp-content/uploads/2022/01/aws-console-user-IAM-2.jpg?resize=604%2C241&ssl=1)](https://i1.wp.com/veducate.co.uk/wp-content/uploads/2022/01/aws-console-user-IAM-2.jpg?ssl=1)

Download this template YAML file for configuring the necessary ClusterRole and ClusterRoleBinding and then apply it to your EKS cluster.

```
curl -o eks-console-full-access.yaml https://amazon-eks.s3.us-west-2.amazonaws.com/docs/eks-console-full-access.yaml

kubectl apply -f eks-console-full-access.yaml
```

[![apply eks console full access configmap](https://i0.wp.com/veducate.co.uk/wp-content/uploads/2022/01/apply-eks-console-full-access-configmap.jpg?resize=604%2C88&ssl=1)](https://i0.wp.com/veducate.co.uk/wp-content/uploads/2022/01/apply-eks-console-full-access-configmap.jpg?ssl=1)

Now edit the following configmap:

```
kubectl edit configmap/aws-auth -n kube-system
```

Add in the following under the data tree:

```
mapUsers: |
  - userarn: arn:aws:iam::3xxxxxxx7:user/dean@veducate.co.uk
    username: admin
    groups:
      - system:masters

```

[![apply eks console full access - edit configmap](https://i1.wp.com/veducate.co.uk/wp-content/uploads/2022/01/apply-eks-console-full-access-edit-configmap.jpg?resize=604%2C287&ssl=1)](https://i1.wp.com/veducate.co.uk/wp-content/uploads/2022/01/apply-eks-console-full-access-edit-configmap.jpg?ssl=1)

After a minute or so, once you revisit the EKS Cluster page in the AWS console, you will see all the relevant details.

[![AWS Console - Container Services - EKS cluster view](https://i2.wp.com/veducate.co.uk/wp-content/uploads/2022/01/AWS-Console-Container-Services-EKS-cluster-view.jpg?resize=604%2C200&ssl=1)](https://i2.wp.com/veducate.co.uk/wp-content/uploads/2022/01/AWS-Console-Container-Services-EKS-cluster-view.jpg?ssl=1)

Regards

[Follow @Saintdle](https://twitter.com/saintdle)<script async="" src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

[Dean Lewis](https://uk.linkedin.com/in/saintdle?trk=profile-badge)

The post [Quick Fix – AWS Console – Current user or role does not have access to Kubernetes objects on this EKS Cluster](https://veducate.co.uk/aws-console-permission-eks-cluster/) appeared first on [vEducate.co.uk](https://veducate.co.uk).