package awseks


// AwsAuth mapping.
//
// Example:
//   var cluster cluster
//
//   adminUser := iam.NewUser(this, jsii.String("Admin"))
//   cluster.awsAuth.AddUserMapping(adminUser, &AwsAuthMapping{
//   	Groups: []*string{
//   		jsii.String("system:masters"),
//   	},
//   })
//
type AwsAuthMapping struct {
	// A list of groups within Kubernetes to which the role is mapped.
	// See: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#default-roles-and-role-bindings
	//
	Groups *[]*string `field:"required" json:"groups" yaml:"groups"`
	// The user name within Kubernetes to map to the IAM role.
	Username *string `field:"optional" json:"username" yaml:"username"`
}