# 配置变量
cluster_name=bosi-eks

oidc_id=$(aws eks describe-cluster --name $cluster_name --query "cluster.identity.oidc.issuer" --output text | cut -d '/' -f 5)


echo $oidc_id

# 确认帐户中是否存在集群发布者ID的IAM OIDC提供商
aws iam list-open-id-connect-providers | grep $oidc_id | cut -d "/" -f4

# 创建OIDC身份提供商
eksctl utils associate-iam-oidc-provider --cluster $cluster_name --approve --region us-east-1

# 生成配置文件
cat > oidc.yaml <<EOF
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
metadata:
  name: bosi-eks
  region: us-east-1
identityProviders:
  - name: upgrade-eks-oidc
    type: oidc
    issuerUrl: `aws eks describe-cluster --name bosi-eks --query "cluster.identity.oidc.issuer" --output text`
    clientId: sts.amazonaws.com
EOF

# 发布者url与身份供应商绑定
eksctl associate identityprovider -f oidc.yaml

eksctl create iamidentitymapping --cluster raymond  --region=us-east-1  --arn  arn:aws:iam::917958955567:user/zhangruimeng@bosicloud.com  --group system:masters --username zhangruimeng