limited-army-96747
12/15/2021, 1:08 AMconst albPodRole = new aws.iam.Role('alb-service-account-role', {
assumeRolePolicy: `{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "",
"Effect": "Allow",
"Principal": {
"Federated": "${eksCluster.core.oidcProvider?.arn}"
},
"Action": "sts:AssumeRoleWithWebIdentity",
"Condition": {
"ForAnyValue:StringEquals": {
"${eksCluster.core.oidcProvider?.url}:sub": ["system:serviceaccount:kube-system:alb-controller-aws-load-balancer-controller"]
}
}
}
]
}
`,
}, {
dependsOn: eksCluster,
})
billowy-army-68599
12/15/2021, 1:57 AMlimited-army-96747
12/15/2021, 12:43 PM