Skip to content

Commit 3ad19d7

Browse files
authored
fix: Do not attach policy if Karpenter node role is not created by module (#2964)
1 parent 6d3d6d9 commit 3ad19d7

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/karpenter/main.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -570,7 +570,7 @@ resource "aws_iam_role_policy_attachment" "node" {
570570
AmazonEC2ContainerRegistryReadOnly = "${local.node_iam_role_policy_prefix}/AmazonEC2ContainerRegistryReadOnly"
571571
AmazonEKS_CNI_IPv6_Policy = var.node_iam_role_attach_cni_policy && var.cluster_ip_family == "ipv6" ? local.cni_policy : ""
572572
AmazonEKS_CNI_Policy = var.node_iam_role_attach_cni_policy && var.cluster_ip_family == "ipv4" ? local.cni_policy : ""
573-
} : k => v if var.create && var.create_iam_role && v != "" }
573+
} : k => v if local.create_node_iam_role && v != "" }
574574

575575
policy_arn = each.value
576576
role = aws_iam_role.node[0].name

0 commit comments

Comments
 (0)