diff --git a/.github/actions/e2e/install-karpenter/action.yaml b/.github/actions/e2e/install-karpenter/action.yaml index 99bdad00b2d4..7ed5ddc979df 100644 --- a/.github/actions/e2e/install-karpenter/action.yaml +++ b/.github/actions/e2e/install-karpenter/action.yaml @@ -60,7 +60,6 @@ runs: helm upgrade --install karpenter oci://${{ inputs.ecr_account_id }}.dkr.ecr.${{ inputs.ecr_region }}.amazonaws.com/karpenter/snapshot/karpenter \ -n kube-system \ --version "v0-$(git rev-parse HEAD)" \ - --set serviceAccount.annotations."eks\.amazonaws\.com/role-arn"="arn:aws:iam::${{ inputs.account_id }}:role/karpenter-irsa-${{ inputs.cluster_name }}" \ --set webhook.enabled=${WEBHOOK_ENABLED} \ --set settings.clusterName="${{ inputs.cluster_name }}" \ --set settings.interruptionQueue="${{ inputs.cluster_name }}" \ diff --git a/.github/actions/e2e/install-prometheus/action.yaml b/.github/actions/e2e/install-prometheus/action.yaml index b5e31525bd28..dc5ac284ed6e 100644 --- a/.github/actions/e2e/install-prometheus/action.yaml +++ b/.github/actions/e2e/install-prometheus/action.yaml @@ -44,7 +44,6 @@ runs: -f ./.github/actions/e2e/install-prometheus/values.yaml \ --set prometheus.prometheusSpec.remoteWrite[0].url=https://aps-workspaces.${{ inputs.region }}.amazonaws.com/workspaces/${{ inputs.workspace_id }}/api/v1/remote_write \ --set prometheus.prometheusSpec.remoteWrite[0].sigv4.region=${{ inputs.region }} \ - --set prometheus.serviceAccount.annotations."eks\.amazonaws\.com/role-arn"="arn:aws:iam::${{ inputs.account_id }}:role/prometheus-irsa-${{ inputs.cluster_name }}" \ --set "kubelet.serviceMonitor.cAdvisorRelabelings[0].targetLabel=metrics_path" \ --set "kubelet.serviceMonitor.cAdvisorRelabelings[0].action=replace" \ --set "kubelet.serviceMonitor.cAdvisorRelabelings[0].sourceLabels[0]=__metrics_path__" \ diff --git a/.github/actions/e2e/setup-cluster/action.yaml b/.github/actions/e2e/setup-cluster/action.yaml index 2e8c47e4d3a3..cd383354b8fe 100644 --- a/.github/actions/e2e/setup-cluster/action.yaml +++ b/.github/actions/e2e/setup-cluster/action.yaml @@ -137,6 +137,9 @@ runs: ebsCSIController: true - name: eks-pod-identity-agent permissionsBoundary: "arn:aws:iam::${{ inputs.account_id }}:policy/GithubActionsPermissionsBoundary" + configurationValues: | + tolerations: + - operator: Exists EOF if [[ ${{ inputs.private_cluster }} == 'true' ]]; then diff --git a/test/cloudformation/iam_cloudformation.yaml b/test/cloudformation/iam_cloudformation.yaml index 84af48a4fdd4..a8166635528a 100644 --- a/test/cloudformation/iam_cloudformation.yaml +++ b/test/cloudformation/iam_cloudformation.yaml @@ -325,6 +325,7 @@ Resources: - sqs:ReceiveMessage - pricing:GetProducts - eks:DescribeCluster + - eks-auth:AssumeRoleForPodIdentity Resource: "*" - Effect: Allow Action: iam:PassRole