Figure out how to use MDE with EKS

[jwietelmann]

This seems to suggest that with another puzzle piece we could do it: https://aws.amazon.com/blogs/opensource/consistent-oidc-authentication-across-multiple-eks-clusters-using-kube-oidc-proxy/

[bit-herder]

that seems to work without modification to the EKS cluster and may be a better fit, but i was looking around and found this info about configuring OIDC with EKS via IAM:

https://docs.aws.amazon.com/eks/latest/userguide/enable-iam-roles-for-service-accounts.html

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc.html

which look to accomplish a similar thing as changing apiserver flags.

[jwietelmann]

Bonus: kube-oidc-proxy is supposed to also help with GKE.