Dependency between eks-pod-identity-agent and CNI #3260
Description
Hi,
I have just found the situation that we want to create EKS cluster with managed add-on Pod Identity and VPC-CNI using Pod Identity. My code looks like that :
module "eks" {
source = "terraform-aws-modules/eks/aws"
version = "20.31.6"
...
cluster_addons = {
eks-pod-identity-agent = {
most_recent = true
}
vpc-cni = {
before_compute = true
most_recent = true
pod_identity_role_arn = {
role_arn = local.aws_vpc_cni_pod_identity_role_arn
service_account = local.aws_vpc_cni_serviceaccount_name
}
}
...[other add-ons]...
}
...
}
So the problem is terraform (randomly) create vpc-cni before eks-pod-identity-agent is created, this leads to VPC-CNI add-on crash.
So I'm not sure how we can solve this dependency problem. Hope to get help on this. Thank you so much.
Best Regards,
VietNC