feat: Override service-account-name for aws-load-balancer-controller …

…addon (aws-ia#1184) Co-authored-by: Bryant Biggs <[email protected]> Resolves undefined resolves undefined
haicasgox · Nov 18, 2022 · 9905c5c · 9905c5c
1 parent c5f6967
commit 9905c5c
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/modules/kubernetes-addons/aws-load-balancer-controller/README.md b/modules/kubernetes-addons/aws-load-balancer-controller/README.md
@@ -55,6 +55,17 @@ Step 6: Run the following command to push this image to your newly created AWS r
 
 Here is the link to get the AWS ELB [service annotations](https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/guide/service/annotations/) for LB Ingress controller
 
+# IRSA is too long
+
+If the IAM role is too long, override the service account name in the `helm_config` to create a shorter role name.
+
+```hcl
+  enable_aws_load_balancer_controller = true
+  aws_load_balancer_controller_helm_config = {
+    service_account_name = "aws-lb-sa"
+  }
+```
+
 <!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
 ## Requirements
 

diff --git a/modules/kubernetes-addons/aws-load-balancer-controller/locals.tf b/modules/kubernetes-addons/aws-load-balancer-controller/locals.tf
@@ -1,6 +1,6 @@
 locals {
   name                 = "aws-load-balancer-controller"
-  service_account_name = "${local.name}-sa"
+  service_account_name = try(var.helm_config["service_account_name"], "${local.name}-sa")
 
   # https://github.com/aws/eks-charts/blob/master/stable/aws-load-balancer-controller/Chart.yaml
   default_helm_config = {