mapping additional k8s service accounts to Karpenter Controller AWS IAM role

[ishwolab]

• [ ] ✋ I have searched the open/closed issues and my issue is not listed. Hi all, I've enabled Karpenter add-ons and deployed to my cluster however, the IAM role for karpenter controller only contains Karpenter's SA to the IAM role's trust relationship policy. I tried passing in additional k8s's SA using oidc_providers variables into the module as defined below:

  
  oidc_providers = {
  this = {
    provider_arn = "oidc.eks.us-west-2.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
    # namespace is inherited from chart
    service_account = "karpenter"
  }
  ebs_controller_sa= {
    provider_arn = "oidc.eks.us-west-2.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
    namespace = "kube-system
    service_account = "ebs-controller-sa"
  }
  }

  however, this config doesn't seem to reflect on the controller iam role.

  I can't yet figure it out as to how I can add those through module. If anyone have done this and could share it or any ideas, I would really appreciate it? thanks