Terraform irsa-ebs-csi module

module "irsa-ebs-csi" {
  source  = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
  version = "4.7.0"

  create_role                   = true
  role_name                     = "AmazonEKSTFEBSCSIRole-${module.eks.cluster_name}"
  provider_url                  = module.eks.oidc_provider
  role_policy_arns              = [data.aws_iam_policy.ebs_csi_policy.arn]
  oidc_fully_qualified_subjects = ["system:serviceaccount:kube-system:ebs-csi-controller-sa"]
}

resource "aws_eks_addon" "ebs-csi" {
 cluster_name             = module.eks.cluster_name
 addon_name               = "aws-ebs-csi-driver"
 addon_version            = "v1.20.0-eksbuild.1"
 service_account_role_arn = module.irsa-ebs-csi.iam_role_arn
 tags = {
   "eks_addon" = "ebs-csi"
   "terraform" = "true"
 }
}

Related

• Terraform EKS module: enable_irsa

See also

• EKS: IRSA, Module: ebs_csi_irsa_role, enable_irsa
• Amazon EBS CSI driver: aws-ebs-csi-driver, ebs_csi_irsa_role, ebs-csi-controller, ebs-csi-node