Skip to main content
Version: 1.25

IAM for AWS cert-manager

This Terraform module provides an easy way to generate cert-manager required IAM permissions.

⚠️ Warning: this module uses "IAM Roles for ServiceAccount" to inject AWS credentials inside cluster autoscaler pods

Requirements

NameVersion
terraform>= 0.15.4
aws>= 3.37.0

Providers

NameVersion
aws>= 3.37.0

Modules

NameSourceVersion
cert_manager_iam_assumable_roleterraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidcv3.16.0

Resources

NameType
aws_iam_policy.cert_managerresource
aws_eks_cluster.thisdata source

Inputs

NameDescriptionTypeDefaultRequired
cluster_nameEKS cluster namestringn/ayes
public_zone_idRoute53 public zone IDstringn/ayes
tagsAdditional tags for the created resourcesmap(string){}no

Outputs

NameDescription
cert_manager_iam_role_arncert-manager IAM role
cert_manager_patchescert-manager Kubernetes resources patches

Usage

module "cert_manager_iam_role" {
source = "../vendor/modules/ingress/aws-cert-manager"
cluster_name = "myekscluster"
public_zone_id = "Z1BM4RA99PG48O"
tags = {"mykey": "myvalue"}
}