terraform-aws-modules/terraform-aws-eks

Additional policies for Managed node group IAM Role

Closed this issue · 2 comments

Hi,

I'm using latest version of module "20.31.0".

For adding additional IAM policies, the module have supported :

  • iam_role_additional_policies : Additional policies for Cluster IAM Role
  • node_iam_role_additional_policies : Additional policies for EKS Auto node IAM role

but in my (common) case, I would need add additional policies for EKS managed (not Auto) node IAM role. I tried to read https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/variables.tf#L667-L687 and in the code, looks like there is no support for this, please correct me If I'm wrong. Thank you.

Best Regards,
VietNC

it just goes inside the node group definition block

iam_role_additional_policies = {
AmazonEC2ContainerRegistryReadOnly = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
additional = aws_iam_policy.node_additional.arn
}

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.