crossplane composition aws-auth

aws-auth.yaml

[...]
    - name: aws-auth-configmap
      base:
        apiVersion: kubernetes.crossplane.io/v1alpha1
        kind: Object
        spec:
          forProvider:
            manifest:
              apiVersion: v1
              kind: ConfigMap
              metadata:
                namespace: kube-system
                name: aws-auth
      patches:
        - fromFieldPath: spec.forProvider.id
          toFieldPath: metadata.name
          transforms:
            - type: string
              string:
                fmt: "%s-eks-aws-auth"
        - fromFieldPath: spec.forProvider.id
          toFieldPath: spec.providerConfigRef.name
          transforms:
            - type: string
              string:
                fmt: "%s-kubernetes-kubeconfig"
        - type: CombineFromComposite
          combine:
            variables:
              - fromFieldPath: metadata.labels[tags.crossplane.io/account]
              - fromFieldPath: spec.forProvider.id
              - fromFieldPath: metadata.labels[tags.crossplane.io/account]
            strategy: string
            string:
              fmt: |
                - groups:
                  - system:bootstrappers
                  - system:nodes
                  rolearn: arn:aws:iam::%s:role/%s-ec2-assume
                  username: system:node:{{EC2PrivateDNSName}}
                - groups:
                  - system:masters
                  rolearn: arn:aws:iam::%s:role/EKSAdminRole
                  username: eksadmin
          toFieldPath: spec.forProvider.manifest.data.mapRoles
          policy:
            fromFieldPath: Optional
[...]