Each environment is managed in a separate Terraform workspace. All environments must be in parity in terms of services they provide, however some variables might differ like instance types, numbers etc.
Environment configuration must be set only in local.env_config in main.tf module.
The EKS module in the terraform configuraiton needs a special role to manage a cluster. That means one have to use a session with assumed role, even full admins.
Example:
./scripts/auth.sh dev-wgt7
export AWS_PROFILE=aeternity-sessionEKS authentication needs explicit IAM role that can be get from terraform output cluser_admin_iam_role_arn.
An exmaple for the dev cluster:
aws eks update-kubeconfig --name dev-wgt7 --role-arn arn:aws:iam::106102538874:role/dev-wgt7-cluster-admin --alias dev-wgt7 --profile aeternity