1. 确保您有足够的权限来创建IAM角色和策略。

2. 创建IAM角色和策略：

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: node-read
rules:
- apiGroups: [""]
  resources: ["nodes"]
  verbs: ["get", "watch", "list"]

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: eks-sa-read-nodes
  namespace: kube-system

---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: eks-sa-read-nodes-binding
subjects:
- kind: ServiceAccount
  name: eks-sa-read-nodes
  namespace: kube-system
roleRef:
  kind: ClusterRole
  name: node-read
  apiGroup: rbac.authorization.k8s.io

---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: eks-sa-read-nodes-binding
  namespace: kube-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: node-read
subjects:
- kind: ServiceAccount
  name: eks-sa-read-nodes
  namespace: kube-system

3. 创建一个ConfigMap，并使用下面的内容替换YOUR_AWS_ACCOUNT_ID和YOUR_IAM_ROLE_NAME：

apiVersion: v1
kind: ConfigMap
metadata:
  name: aws-auth
  namespace: kube-system
data:
  mapRoles: |
    - rolearn: arn:aws:iam::YOUR_AWS_ACCOUNT_ID:role/YOUR_IAM_ROLE_NAME
      username: YOUR_IAM_ROLE_NAME
      groups:
        - system:masters

4. 确保您已安装AWS CLI，并使用下面的命令更新配置：

aws eks update-kubeconfig --name YOUR_CLUSTER_NAME

5. 确保您有足够的权限，然后将IAM角色附加到Pod