#!/bin/bash -xe
role_name=$1

[[ $# < 1 ]] && echo "$0 <role_name>" && exit 1
account_id=$(aws sts get-caller-identity | jq -r '.Account')
role_name=arn:aws:iam::$account_id:role/$role_name
kubectl run --image=fstab/aws-cli --overrides=$(\
    jo spec=$(\
        jo template=$(\
            jo metadata=$(jo annotations=$(\jo iam.amazonaws.com/role=$role_name))
                ))) \
        aws-cli \
        --rm -it \
        --command -- /bin/bash