github-mirrors/terraform-aws-eks
1
0
Fork 0
mirror of https://github.com/ysoftdevs/terraform-aws-eks.git synced 2026-01-11 22:41:43 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: Use dynamic partition data source to determine DNS suffix for Karpenter EC2 pass role permission (#3193)

Browse Source 
* fix karpenter iam passrole to ec2 api bug, to support aws cn

* fix: Use dyanmic partition value for DNS suffix

---------

Co-authored-by: Shuiping <shuiping@Shuipings-MacBook-Pro.local>
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
This commit is contained in:
joey100
2024-10-27 08:12:25 +08:00
committed by GitHub
parent 4abc779c0e
commit dea6c44b45
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
modules/karpenter/policy.tf
View File

@@ -195,7 +195,7 @@ data "aws_iam_policy_document" "v033" {
condition {
test = "StringEquals"
variable = "iam:PassedToService"
values = ["ec2.amazonaws.com"]
values = ["ec2.${local.dns_suffix}"]
}
}
@@ -584,7 +584,7 @@ data "aws_iam_policy_document" "v1" {
condition {
test = "StringEquals"
variable = "iam:PassedToService"
values = ["ec2.amazonaws.com"]
values = ["ec2.${local.dns_suffix}"]
}
}