authMode := eks.AuthenticationModeApiAndConfigMap
role, err := iam.NewRole(ctx, "example-cluster-2-role", &iam.RoleArgs{
    AssumeRolePolicy: pulumi.String(`{
        "Version": "2012-10-17",
        "Statement": [{
            "Action": "sts:AssumeRole",
            "Effect": "Allow",
            "Principal": {
                "Service": "<http://ec2.amazonaws.com|ec2.amazonaws.com>"
            }
        }]
    }`),
})
if err != nil {
    return nil, err
}
accessEntries := map[string]eks.AccessEntryArgs{
    "example-cluster-role": {
        PrincipalArn: role.Arn,
        AccessPolicies: map[string]eks.AccessPolicyAssociationInput{
            "view": eks.AccessPolicyAssociationArgs{
                PolicyArn: pulumi.String("arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy"),
                AccessScope: awseks.AccessPolicyAssociationAccessScopeArgs{
                    Type: pulumi.String("cluster"),
                },
            },
        },
    },
}
clusterArgs := &eks.ClusterArgs{
    AuthenticationMode: &authMode,
    AccessEntries:      accessEntries,
}
return eks.NewCluster(ctx, eksClusterName, clusterArgs, opts...)