Need clarity on combined IAM role for VPC CNI and CloudWatch for NetworkPolicy logging about terraform-aws-eks HOT 3 CLOSED

Modifying the existing iam-role-for-service-accounts-eks module?

Yes, we should add this under a flag since the addon now supports this. Please also open an issue or PR on the successor to the IRSA sub-module here as well https://github.com/clowdhaus/terraform-aws-eks-pod-identity (still a work in progress that I need to wrap up soon)

from terraform-aws-eks.

actually, thinking about this a bit more so that it follows with how we handle CloudWatch logs in general. We should figure out the best path to support creating the CloudWathc log group in Terraform - this is what IaC users typically want so you can tag it, control the log expiration, etc. This is another one of those areas where I'm a bit fuzzy on whether that should be defined in the cluster module here, or the module that creates the role.

Do you know what the name of the log group is thats created when you enable this (and how that relates to the cluster name)?

from terraform-aws-eks.

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

from terraform-aws-eks.