Merge pull request #233 from engedaam/use-pod-identity-1.23

Use e2e pod identity
engedaam · Dec 11, 2023 · af53ac4 · af53ac4
2 parents 889aa85 + 813de0d
commit af53ac4
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/actions/e2e/setup-cluster/action.yaml b/.github/actions/e2e/setup-cluster/action.yaml
@@ -75,6 +75,18 @@ runs:
       cmd="create"
       eksctl get cluster --name ${{ inputs.cluster_name }} && cmd="upgrade"
 
+      karpenterIAM=EOF
+        podIdentityAssociations:
+          - namespace: kube-system
+            serviceAccountName: karpenter
+            roleName: karpenter-irsa-${{ inputs.cluster_name }}
+            permissionsBoundaryARN: "arn:aws:iam::${{ inputs.account_id }}:policy/GithubActionsPermissionsBoundary"
+            permissionPolicyARNs: 
+              - "arn:aws:iam::${{ inputs.account_id }}:policy/KarpenterControllerPolicy-${{ inputs.cluster_name }}"
+      EOF
+
+      echo $karpenterIAM
+
       cat << EOF >> clusterconfig.yaml
       ---
       apiVersion: eksctl.io/v1alpha5