Integrations

The role template has an optional EksClusterNames parameter: up to five EKS clusters in the region get an access entry bound to AmazonEKSViewPolicy, the Kubernetes "view" role.

The engine reads deployments, pods and nodes only (plus the Karpenter NodePools and NodeClaims when the view role covers them). No secrets, no logs, no writes. The clusters must use authentication mode API or API_AND_CONFIG_MAP.

CloudFormation template (readonly-role.yaml)