1
0

feat: added preserve=false to eks addons. which is crutial to prevent residual resources

This commit is contained in:
xpk
2026-04-02 17:31:33 +08:00
parent 36036bb6f5
commit 998636f079
2 changed files with 3 additions and 1 deletions
+2
View File
@@ -184,10 +184,12 @@ module "eks" {
addons = {
coredns = {}
eks-pod-identity-agent = {
preserve = false
before_compute = true
}
kube-proxy = {}
aws-ebs-csi-driver = {
preserve = false
pod_identity_association = [{
role_arn = module.CsiPodIdentity.role-arn
service_account = "ebs-csi-controller-sa"
@@ -49,7 +49,7 @@ resource "aws_iam_role_policy_attachment" "pa" {
policy_arn = each.value.arn
}
resource "aws_iam_role_policy_attachment" "CsiPodIdentity" {
resource "aws_iam_role_policy_attachment" "mp-attachments" {
for_each = toset(var.attach-managed-policies)
role = aws_iam_role.r.name
policy_arn = each.value