Don't replace service account with update-aws-node

eksctl-io · Jul 21, 2020 · d817998 · d817998
1 parent bcbc2f1
commit d817998
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/pkg/addons/default/aws_node.go b/pkg/addons/default/aws_node.go
@@ -76,6 +76,18 @@ func UpdateAWSNode(rawClient kubernetes.RawClientInterface, region string, plan
 			continue
 		}
 
+		// Leave service account if it exists
+		// to avoid overwriting annotations
+		if resource.GVK.Kind == "ServiceAccount" {
+			_, exists, err := resource.Get()
+			if err != nil {
+				return false, err
+			}
+			if exists {
+				continue
+			}
+
+		}
 		status, err := resource.CreateOrReplace(plan)
 		if err != nil {
 			return false, err