@@ -3,9 +3,10 @@ module "eks" {
33 source = " terraform-aws-modules/eks/aws"
44 version = " ~> 21.0"
55
6- name = var. cluster_name
7- kubernetes_version = var. cluster_version
8- endpoint_public_access = true
6+ name = var. cluster_name
7+ kubernetes_version = var. cluster_version
8+ endpoint_public_access = true
9+ enable_cluster_creator_admin_permissions = true
910
1011 addons = {
1112 coredns = {
@@ -21,6 +22,7 @@ module "eks" {
2122 aws-ebs-csi-driver = {
2223 service_account_role_arn = module.ebs_csi_irsa_role.iam_role_arn
2324 most_recent = true
25+ resolve_conflicts = " OVERWRITE"
2426 }
2527 }
2628
@@ -29,7 +31,13 @@ module "eks" {
2931 vpc_id = module. vpc . vpc_id
3032 subnet_ids = module. vpc . private_subnets
3133
32- enable_cluster_creator_admin_permissions = true
34+ # Access entry for CAST AI nodes to join the cluster
35+ access_entries = {
36+ castai_node = {
37+ principal_arn = module.castai- eks- role- iam[0 ].instance_profile_role_arn
38+ type = " EC2_LINUX"
39+ }
40+ }
3341
3442 self_managed_node_groups = {
3543 node_group_1 = {
@@ -39,6 +47,7 @@ module "eks" {
3947 min_size = 2
4048 desired_size = 2
4149
50+ # Allow pods to access IMDS (required for castai-agent)
4251 metadata_options = {
4352 http_endpoint = " enabled"
4453 http_tokens = " required"
@@ -100,11 +109,3 @@ resource "aws_security_group" "additional" {
100109 ]
101110 }
102111}
103-
104- # CAST AI access entry for nodes to join the cluster.
105- resource "aws_eks_access_entry" "castai" {
106- count = length (module. castai-eks-role-iam ) > 0 ? 1 : 0
107- cluster_name = module. eks . cluster_name
108- principal_arn = module. castai-eks-role-iam [0 ]. instance_profile_role_arn
109- type = " EC2_LINUX"
110- }
0 commit comments