Can I use this with Aliyun managed k8s service?

[OUCHUNYU]

Problem

As I understand about Aliyun managed k8s service, I won't be able to access or configure master node, it seems like that I would not be able to complete step 3 in README: "Configure your API server to talk to the server".

My use case

I want to enable our team members to use kubectl to access our cluster by assuming a role(cross-account).

Questions

1. Is there a workaround I can do about this?
2. Is there an alternative to ack-ram-authenticator?
3. If the answer is "no" for both 1 and 2, do I have to use the "Dedicated Kubernetes"(the 3-master-node cluster service) to achieve my use case?

[DahuK]

@OUCHUNYU Thanks for your good questions, we will support the feature of assuming the role from cross-account soon, then there is also a plan to give a security advanced options when creating the managed kubernetes cluster to customize its apiserver, will notice you when the features release.

[cccfs]

Is there any progress？