github-mirrors/terraform-aws-eks
1
0
Fork 0
mirror of https://github.com/ysoftdevs/terraform-aws-eks.git synced 2026-03-23 01:49:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: Add support for overriding DNS suffix for cluster IAM role service principal endpoint (#1905)

Browse Source
This commit is contained in:
Bryant Biggs
2022-03-02 12:26:20 -05:00
committed by GitHub
parent 9a99689cc1
commit 9af0c2495a
4 changed files with 19 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
examples/eks_managed_node_group/main.tf
View File

@@ -89,7 +89,11 @@ module "eks" {
instance_types = ["m6i.large", "m5.large", "m5n.large", "m5zn.large"]
# We are using the IRSA created below for permissions
iam_role_attach_cni_policy = false
# However, we have to deploy with the policy attached FIRST (when creating a fresh cluster)
# and then turn this off after the cluster/node group is created. Without this initial policy,
# the VPC CNI fails to assign IPs and nodes cannot join the cluster
# See https://github.com/aws/containers-roadmap/issues/1666 for more context
iam_role_attach_cni_policy = true
}
eks_managed_node_groups = {