Hi all. I'm looking at importing existing EKS clusters into rancher (2.6.3) and this page https://rancher.com/docs/rancher/v2.6/en/cluster-provisioning/registered-clusters/ describes the process and requirements including cluster rbac. What it doesn't say is what IAM policy is needed for the import. The EKS cluster creation doc specified an IAM policy but it has way too many permissions for existing cluster. Does anyone have details of the policy required?

This saved me so much time and money. Because I did not have to purchase a certificate or spend time trying to get certificate manager or letsencrypt to work. I went from nothing to full HA rancher in about an hour and a half. (most of that time was waiting for the cluster to build)