groups:

system:controller: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#controller-roles
system:bootstrappers
system:node
system:nodes
system:node-proxier
system:masters
system:serviceaccount:
system:serviceaccounts:
system:kube-scheduler
system:kube-dns
system:volume-scheduler
system:kube-controller-manager

system:basic-user
system:dyscover

kube-system                           system::leader-locking-kube-controller-manager   2022-07-06T13:16:03Z
kube-system                           system::leader-locking-kube-scheduler            2022-07-06T13:16:03Z

ClusterRole

cluster-admin
admin
edit
view

Related

• eksctl create iamidentitymapping
• kind: ClusterRole
• Terraform EKS: aws auth roles
• aws-auth ConfigMap

See also

• Kubernetes API Server, kube-apiserver, system:bootstrappers, --event-ttl
• Kubernetes RBAC kubectl auth, kubectl auth can-i, kubectl auth reconcile kubectl create [ role | clusterrole | clusterrolebinding | rolebinding | serviceaccount ], groups:, Kubernetes RBAC good practices