fix(main.tf): custom_suffix does not apply for spot

SCT-Engineering · Sep 4, 2024 · b0a84a4 · b0a84a4
1 parent feb202e
commit b0a84a4
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -51,6 +51,7 @@ The module deploys Karpenter needed AWS resources, namely in IAM. It copies the
 | [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |
 | [aws_ecr_image.karpenter_image](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ecr_image) | data source |
 | [aws_ecr_image.kubectl_image](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ecr_image) | data source |
+| [aws_iam_roles.roles](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_roles) | data source |
 | [aws_subnets.container_subnets](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/subnets) | data source |
 
 ## Inputs

diff --git a/main.tf b/main.tf
@@ -181,11 +181,18 @@ resource "aws_iam_instance_profile" "karpenter_node_instance_profile" {
   role = module.karpenter_resources.node_iam_role_name
 }
 
+# Query to see if service-linked role exists
+data "aws_iam_roles" "roles" {
+  path_prefix = "/aws-reserved/spot.amazonaws.com"
+}
+
 # Permission for spot
 resource "aws_iam_service_linked_role" "ec2_spot" {
+  count            = data.aws_iam_roles.roles == null ? 1 : 0
   aws_service_name = "spot.amazonaws.com"
 }
 
+
 # SHOULD PROBABLY PUT THESE OBJECTS INTO A HELM CHART
 # Create karpenter default
 resource "kubectl_manifest" "karpenter_ec2_node_class" {