[enhancement] Optionally add RBAC permissions for AWS EKS cluster

[brl0]

Description

After deploying qhub, additional steps are necessary to grant RBAC permissions to other AWS administrators.

Suggestion

It would be convenient to have an option to grant permissions to other users.
Another, possibly better approach, would be to take a list of users in the config file and create an IAM group and then grant permissions to that group.
This approach seems likely to be potentially adaptable to providers other than AWS.

Context

This would help simplify the management of the cluster by ensuring designated IAM users have appropriate access to the cluster.

@iameskild, @tylerpotts, can you provide additional details about how permissions need to be added currently?

[brl0]

Possibly related to #12.

[costrouc]

After deploying qhub, additional steps are necessary to grant RBAC permissions to other AWS administrators.

@brl0 do you have any ideas how we could automate this in terraform? From what I remember you have to add/modify a resource in kubernetes.

[brl0]

Good question, off the top of my head, I would think we might be able to create the appropriate roles or role bindings needed with the standard kubernetes provider, and if not, perhaps using a kubernetes_manifest from the kubernetes-alpha provider, at least as a fall back approach.

I think provisioning a group directly in the cloud provider's IAM and then granting permission to that group would be more maintainable, if that is possible.

[github-actions]

This issue has been automatically marked as stale because there was no recent activity in 60 days. Remove the stale label or add a comment, otherwise, this issue will automatically be closed in 7 days if no further activity occurs.

[github-actions]

This issue was closed because it has been stalled for 7 days with no activity.