Skip to content

Commit d5089d9

Browse files
committed
Amends migrate to access entry documentation
1 parent 5dbce1f commit d5089d9

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

userdocs/src/usage/access-entries.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -147,15 +147,15 @@ eksctl delete accessentry -f config.yaml
147147

148148
### Migrate IAM identity mappings to access entries
149149

150-
The user can migrate their existing IAM identities from configmap to access entries by running the following:
150+
The user can migrate their existing IAM identities from `aws-auth` configmap to access entries by running the following:
151151

152152
```shell
153153
eksctl utils migrate-to-access-entry --cluster my-cluster --target-authentication-mode <API or API_AND_CONFIG_MAP>
154154
```
155155

156156
When `--target-authentication-mode` flag is set to `API`, authentication mode is switched to `API` mode (skipped if already in `API` mode), IAM identity mappings will be migrated to access entries, and `aws-auth` configmap is deleted from the cluster.
157157

158-
When `--target-authentication-mode` flag is set to `API_AND_CONFIG_MAP`, authentication mode is switched to `API_AND_CONFIG_MAP` mode (skipped if already in `API_AND_CONFIG_MAP` mode), IAM identity mappings will be migrated to access entries.
158+
When `--target-authentication-mode` flag is set to `API_AND_CONFIG_MAP`, authentication mode is switched to `API_AND_CONFIG_MAP` mode (skipped if already in `API_AND_CONFIG_MAP` mode), IAM identity mappings will be migrated to access entries, but `aws-auth` configmap is preserved.
159159

160160
???+ note
161161
When `--target-authentication-mode` flag is set to `API`, this command will not update authentication mode to `API` mode if `aws-auth` configmap has one of the below constraints.

0 commit comments

Comments
 (0)