Breaking Changes
- Support for EKS Pod Identity: Introduced the
iam_role_type
variable to select the IAM role type, allowing users to choose betweenirsa
(IAM Roles for Service Accounts) andpod_identity
(EKS Pod Identity). This change may affect existing configurations, as the default behavior has been modified topod_identity
.
Upgrade Instructions
-
Review and Update Configuration: Examine your current Terraform configuration and determine which IAM role type (
irsa
orpod_identity
) aligns with your deployment. -
Set the
iam_role_type
Variable: Explicitly define theiam_role_type
variable in your Terraform configuration to match your chosen IAM role type. For example:
module "secrets_store_csi" {
source = "SPHTech-Platform/secrets-store-csi/aws"
version = "~> 2.2.0"
iam_role_type = "irsa" # or "pod_identity"
# ... other configurations ...
}
Notes
- Impact Assessment: Due to the introduction of the
iam_role_type
variable, existing deployments without this variable set may experience changes in behavior. It's crucial to review and adjust your configuration accordingly to prevent unexpected issues.
Full Changelog: v2.1.1...v2.2.0