github-mirrors/terraform-aws-eks
1
0
Fork 0
mirror of https://github.com/ysoftdevs/terraform-aws-eks.git synced 2026-03-17 23:13:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: Add additional IAM policy to allow cluster role to use KMS key provided for cluster encryption (#1915)

Browse Source
This commit is contained in:
Bryant Biggs
2022-03-02 12:29:35 -05:00
committed by GitHub
parent cbd9e4fc0e
commit 7644952131
4 changed files with 53 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
examples/eks_managed_node_group/main.tf
View File

@@ -31,6 +31,14 @@ module "eks" {
# IPV6
cluster_ip_family = "ipv6"
# We are using the IRSA created below for permissions
# However, we have to deploy with the policy attached FIRST (when creating a fresh cluster)
# and then turn this off after the cluster/node group is created. Without this initial policy,
# the VPC CNI fails to assign IPs and nodes cannot join the cluster
# See https://github.com/aws/containers-roadmap/issues/1666 for more context
# TODO - remove this policy once AWS releases a managed version similar to AmazonEKS_CNI_Policy (IPv4)
create_cni_ipv6_iam_policy = true
cluster_addons = {
coredns = {
resolve_conflicts = "OVERWRITE"