pvcy / enterprise-install

Setup Privacy Dynamics software stack on variety of Cloud Prem scenarios including AWS, GKE etc.
0 stars 0 forks source link

Terraform community module for IRSA roles; EFS fixes #21

Closed michael-chambers closed 2 months ago

michael-chambers commented 3 months ago

For #20. This switches the iamserviceaccounts module to rely on the community Terraform module iam/iam-role-for-service-accounts-eks.

This also updates the elastic-file-system module to only create mount targets for subnets actually used by EKS cluster nodegroups. This will substantially lower the likelihood that our module will attempt to create more than one EFS mount target per Availability Zone, though it does not eliminate the potential completely.

Finally, this makes formatting changes throughout to better adhere to the Terraform style guide.