fix aws_auth_configmap_yaml rolearn

terraform-aws-modules · Jan 31, 2022 · 2766fd7 · 2766fd7
1 parent 16f46db
commit 2766fd7
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 2 deletions.
diff --git a/examples/complete/main.tf b/examples/complete/main.tf
@@ -309,7 +309,7 @@ locals {
         groups:
           - system:bootstrappers
           - system:nodes
-      - rolearn: ${module.fargate_profile.fargate_profile_arn}
+      - rolearn: ${module.fargate_profile.iam_role_arn}
         username: system:node:{{SessionName}}
         groups:
           - system:bootstrappers

diff --git a/modules/fargate-profile/outputs.tf b/modules/fargate-profile/outputs.tf
@@ -35,3 +35,8 @@ output "fargate_profile_status" {
   description = "Status of the EKS Fargate Profile"
   value       = try(aws_eks_fargate_profile.this[0].status, "")
 }
+
+output "fargate_profile_pod_execution_role_arn" {
+  description = "Amazon Resource Name (ARN) of the EKS Fargate Profile Pod execution role ARN"
+  value       = try(aws_eks_fargate_profile.this[0].pod_execution_role_arn, "")
+}
diff --git a/outputs.tf b/outputs.tf
@@ -169,6 +169,7 @@ output "aws_auth_configmap_yaml" {
       self_managed_role_arns       = [for group in module.self_managed_node_group : group.iam_role_arn if group.platform != "windows"]
       win32_self_managed_role_arns = [for group in module.self_managed_node_group : group.iam_role_arn if group.platform == "windows"]
       fargate_profile_arns         = [for group in module.fargate_profile : group.fargate_profile_arn]
+      pod_execution_role_arns      = [for group in module.fargate_profile : group.fargate_profile_pod_execution_role_arn]
     }
   )
 }
diff --git a/templates/aws_auth_cm.tpl b/templates/aws_auth_cm.tpl
@@ -27,7 +27,7 @@ data:
         - system:bootstrappers
         - system:nodes
 %{ endfor ~}
-%{ for role in fargate_profile_arns ~}
+%{ for role in pod_execution_role_arns ~}
     - rolearn: ${role}
       username: system:node:{{SessionName}}
       groups: