Add well-known IAM Role Service Account policy for the EBS CSI driver

[jalaziz]

Description

Add well-known IAM policy support for EBS CSI driver/controller IAM role
service accounts.

The EBS CSI driver is a common installation that should probably be supported by a well-known policy.

Checklist

• Added tests that cover your change (if possible)
• Added/modified documentation as required (such as the README.md, or the userdocs directory)
• Manually tested
• Made sure the title of the PR is a good description that can go into the release notes
• (Core team) Added labels for change area (e.g. area/nodegroup) and kind (e.g. kind/improvement)

BONUS POINTS checklist: complete for good vibes and maybe prizes?! 🤯

• Backfilled missing tests for code in same general area 🎉
• Refactored something and made the world a better place 🌟

[Callisto13]

Thanks for this @jalaziz 👍 .

Just thinking, I am not sure we have docs for this wellKnownPolicies thing 🤔 . Do you think you could add some listing the options people have?

[jalaziz]

Thanks for this @jalaziz 👍 .

Just thinking, I am not sure we have docs for this wellKnownPolicies thing 🤔 . Do you think you could add some listing the options people have?

Was thinking the same thing actually. Will add some docs.

[jalaziz]

@Callisto13 Turns out there were docs, it was just very subtle.

I've tried to improve the docs a bit.

[jalaziz]

@Callisto13 anything else to improve with this PR?

[Callisto13]

hey @jalaziz thanks for your patience: we were having a little existential crisis on the wellKnownPolicies feature, but all good now 😂

[Callisto13]

lgtm 🎉