aws-iam-authenticator eks heptio-iam-authenticator kubernetes terraform

get-token

#!/usr/bin/env sh

set -e
[ -z "$1" ] && exit 1
[ -z "$2" ] && exit 2

AWS_PROFILE=$1 aws-iam-authenticator token -i $2 | jq -M '.status'

setup.tf

#!terraform
# hackity hack, dont come back

data "external" "kube_token" {
  program = ["/usr/local/bin/get-token", "saml", "${local.cluster_name}"]
}

provider "external" {
  version = "~> 1.0"
}

provider "kubernetes" {
  cluster_ca_certificate = "${base64decode(data.terraform_remote_state.infrastructure.cluster_ca_certificate)}"
  host                   = "${data.terraform_remote_state.infrastructure.cluster_endpoint}"
  token                  = "${lookup(data.external.kube_token.result, "token")}"
  version                = "~> 1.3"
}

...