创建eks集群

复制OIDC

登录：https://ap-southeast-1.console.aws.amazon.com/eks/home?region=ap-southeast-1#/clusters/${cluster_name}

配置IAM OIDC

https://us-east-1.console.aws.amazon.com/iamv2/home?region=ap-southeast-1#/identity_providers/create

交换机配置公网/内网属性（由ingress中annotations.alb.ingress.kubernetes.io/scheme控制）

标签：kubernetes.io/role/elb 对应internet-facing ALB
标签：kubernetes.io/role/internal-elb 对应internal ALB

eks集群操作（参考官方文档）

https://docs.aws.amazon.com/zh_cn/eks/latest/userguide/aws-load-balancer-controller.html

参考文档

https://zhuanlan.zhihu.com/p/458454919
https://docs.aws.amazon.com/zh_cn/eks/latest/userguide/aws-load-balancer-controller.html