The aws-iam-authenticator version included in the eks flavour of the terragrunt image is outdated (0.4.0).
This version does not support passing AWS external id when assuming a role and we need this functionality.
Luckily the latest version of aws-iam-authenticator (0.5.2) does support this, so I suggest to bump to the latest version in the eks image of terragrunt.
The aws-iam-authenticator version included in the eks flavour of the terragrunt image is outdated (0.4.0). This version does not support passing AWS external id when assuming a role and we need this functionality. Luckily the latest version of aws-iam-authenticator (0.5.2) does support this, so I suggest to bump to the latest version in the eks image of terragrunt.
Link to PR of aws-iam-authenticator adding external id support: https://github.com/kubernetes-sigs/aws-iam-authenticator/pull/228 More information on AWS external id: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html