How do I create an access entry?

[pablofilgueira91]

Hello, I am creating my EKS cluster with Crossplane, everything is created correctly, but when I enter the cluster through the AWS console I see the message in the image.

How can I create the access entry with Crossplane? I can't find a way.
I tried to create the cluster from the AWS console and this is created automatically.

[turkenf]

We do not support the access entry resource now. However, after this PR is merged and released, you will be able to use it.

[pablofilgueira91]

Thanks for the reply, is there an estimated date for this to happen?

[turkenf]

Just released :) https://marketplace.upbound.io/providers/upbound/provider-aws-eks/v1.11.0/resources/eks.aws.upbound.io/AccessEntry/v1beta1

[pablofilgueira91]

Thank you, I'm trying it and I was able to create the AccessEntry correctly but I'm having an error with the AccessPolicyAssociation, could you help me?
This is the error I have in the AccessPolicyAssociation

This is my templates

apiVersion: eks.aws.upbound.io/v1beta1
kind: AccessEntry
metadata:
  name: access-entry
spec:
  forProvider:
    clusterNameRef:
      name: eksclustercrossplane
    principalArn: arn:aws:iam::518055008543:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWSAdministratorAccess_4abe4318778ad858
    region: us-east-1
    type: STANDARD
---
apiVersion: eks.aws.upbound.io/v1beta1
kind: AccessPolicyAssociation
metadata:
  name: access-entry
spec:
  forProvider:
    accessScope:
      type: cluster
    clusterNameRef:
      name: eksclustercrossplane
    principalArnRef:
      name: access-entry
    policyArn: arn:aws:iam::aws:policy/AmazonEKSClusterPolicy
    region: us-east-1

the configured Policy Arn exists in my AWS

I appreciate any help

[mergenci]

According to the example manifest, policyArn should not be of an IAM policy, which is the case in your manifest. I don't have any experience in using this resource, but you can take a look at our example manifest with dependencies included. As far as I understand, policyArn is supposed to refer to one of the preset access policy permissions.