kops example for AWS IAM authenticator debugging

config.yaml

apiVersion: kops/v1alpha2
kind: Cluster
metadata:
  creationTimestamp: 2017-02-12T20:24:44Z
  name: k8s.eu.prod.x.z
spec:
  api:
    loadBalancer:
      type: Public
  authorization:
    rbac: {}
  channel: stable
  cloudProvider: aws
  configBase: s3://x-z-kops-state/k8s.eu.prod.x.z
  dnsZone: eu.prod.x.z
  etcdClusters:
  - etcdMembers:
    - instanceGroup: master-eu-central-1a
      name: a
    - instanceGroup: master-eu-central-1b
      name: eu-central-1b
    - instanceGroup: master-eu-central-1c
      name: eu-central-1c
    name: main
  - etcdMembers:
    - instanceGroup: master-eu-central-1a
      name: a
    - instanceGroup: master-eu-central-1b
      name: eu-central-1b
    - instanceGroup: master-eu-central-1c
      name: eu-central-1c
    name: events
  iam:
    legacy: true
  kubernetesApiAccess:
  - 0.0.0.0/0
  kubernetesVersion: 1.11.6
  masterInternalName: api.internal.k8s.eu.prod.x.z
  masterPublicName: api.k8s.eu.prod.x.z
  networkCIDR: 172.22.0.0/16
  networking:
    weave: {}
  nonMasqueradeCIDR: 100.64.0.0/10
  sshAccess:
  - 0.0.0.0/0
  subnets:
  - cidr: 172.22.16.0/20
    name: eu-central-1a
    type: Private
    zone: eu-central-1a
  - cidr: 172.22.32.0/20
    name: eu-central-1b
    type: Private
    zone: eu-central-1b
  - cidr: 172.22.48.0/20
    name: eu-central-1c
    type: Private
    zone: eu-central-1c
  - cidr: 172.22.0.0/23
    name: utility-eu-central-1a
    type: Utility
    zone: eu-central-1a
  - cidr: 172.22.2.0/23
    name: utility-eu-central-1b
    type: Utility
    zone: eu-central-1b
  - cidr: 172.22.4.0/23
    name: utility-eu-central-1c
    type: Utility
    zone: eu-central-1c
  topology:
    bastion:
      bastionPublicName: bastion.k8s.eu.prod.x.z
      idleTimeoutSeconds: 3600
    dns:
      type: Public
    masters: private
    nodes: private