serviceAccountRoleArn

@JvmName(name = "stdcrrkacrduchvq")
suspend fun serviceAccountRoleArn(value: Output<String>)
@JvmName(name = "wwvbnnueukcfgrox")
suspend fun serviceAccountRoleArn(value: String?)

Parameters

value

The Amazon Resource Name (ARN) of an existing IAM role to bind to the add-on's service account. The role must be assigned the IAM permissions required by the add-on. If you don't specify an existing IAM role, then the add-on uses the permissions assigned to the node IAM role. For more information, see Amazon EKS node IAM role in the Amazon EKS User Guide.

Note: To specify an existing IAM role, you must have an IAM OpenID Connect (OIDC) provider created for your cluster. For more information, [see Enabling IAM roles

  • for service accounts on your cluster](https://docs.aws.amazon.com/eks/latest/userguide/enable-iam-roles-for-service-accounts.html) in the Amazon EKS User Guide.