fix: Fixed example where VPC CNI permissions should apply to the `aws…

…-node` account (#225)
terraform-aws-modules · Apr 15, 2022 · 1fb1cfc · 1fb1cfc
1 parent 5b792f2
commit 1fb1cfc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/examples/iam-role-for-service-accounts-eks/main.tf b/examples/iam-role-for-service-accounts-eks/main.tf
@@ -255,7 +255,7 @@ module "vpc_cni_ipv4_irsa_role" {
   oidc_providers = {
     ex = {
       provider_arn               = module.eks.oidc_provider_arn
-      namespace_service_accounts = ["kube-system:aws-vpc-cni"]
+      namespace_service_accounts = ["kube-system:aws-node"]
     }
   }
 
@@ -272,7 +272,7 @@ module "vpc_cni_ipv6_irsa_role" {
   oidc_providers = {
     ex = {
       provider_arn               = module.eks.oidc_provider_arn
-      namespace_service_accounts = ["kube-system:aws-vpc-cni"]
+      namespace_service_accounts = ["kube-system:aws-node"]
     }
   }