No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

If I enable the OIDC provider detailed here- <https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/eks/#ClusterOptions-createOidcProvider>
How do I then create a new iam role for a given service account?

I have a working example in go but it requires I have access to the arn and URL of the oidcprovider.

The pulumi link in those docs appears to be broken.

trying to do it in ts using the eks extension

the eks package exports a couple of properties
```export const oidcProviderArn = cluster.core.oidcProvider.arn
export const oidcProviderUrl = cluster.core.oidcProvider.url```

here's a helper function you can pass that to
<https://gist.github.com/jaxxstorm/59d378cccca36faf49f6ac2dda86f603>

and you'd use like this
```const role = rbac.CreateServiceAccountIAMRole("foo",
    namespaceName,
    oidcProviderArn,
    oidcProviderUrl,
);```

the key point is that IAM roles take a standard string, and the oidc exports are outputs, so you need to build the role inside an `apply`