Conditionally added AWS_STS_REGIONAL_ENDPOINTS flag to controller's e…

…fs-plugin container. Is needed to create persistent volumes on private EKS clusters. Without this, dynamic pv creation errors: "Failed to fetch File System info: Describe File System failed"
kubernetes-sigs · Dec 7, 2021 · 59757e3 · 59757e3
1 parent 5549c90
commit 59757e3
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/charts/aws-efs-csi-driver/CHANGELOG.md b/charts/aws-efs-csi-driver/CHANGELOG.md
@@ -1,5 +1,8 @@
 # Helm chart
 
+# v2.2.2
+* Add STS regional endpoints flag to fix PV creation on private EKS
+
 # v2.2.1
 * Add controller.volMetricsOptIn for emitting volume metrics
 

diff --git a/charts/aws-efs-csi-driver/Chart.yaml b/charts/aws-efs-csi-driver/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: aws-efs-csi-driver
-version: 2.2.1
+version: 2.2.2
 appVersion: 1.3.3
 kubeVersion: ">=1.17.0-0"
 description: "A Helm chart for AWS EFS CSI Driver"

diff --git a/charts/aws-efs-csi-driver/templates/controller-deployment.yaml b/charts/aws-efs-csi-driver/templates/controller-deployment.yaml
@@ -58,6 +58,10 @@ spec:
           env:
             - name: CSI_ENDPOINT
               value: unix:///var/lib/csi/sockets/pluginproxy/csi.sock
+            {{- if .Values.controller.regionalStsEndpoints }}
+            - name: AWS_STS_REGIONAL_ENDPOINTS
+              value: regional
+            {{- end }}
           volumeMounts:
             - name: socket-dir
               mountPath: /var/lib/csi/sockets/pluginproxy/

diff --git a/charts/aws-efs-csi-driver/values.yaml b/charts/aws-efs-csi-driver/values.yaml
@@ -76,7 +76,7 @@ controller:
     ## Enable if EKS IAM for SA is used
     #  eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/efs-csi-role
   healthPort: 9909
-
+  regionalStsEndpoints: false
 ## Node daemonset variables
 
 node: