[EKS] [request]: Support podIdentityAssociations in EKS Community Add-ons "cert-manager"

[masakihr]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Tell us about your request Please support podIdentityAssociations in the EKS Community Add-ons "cert-manager".

Which service(s) is this request for? EKS Add-ons

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard? Currently, specifying the podIdentityAssociations parameter when creating EKS Community Add-ons "cert-manager" fails.

❯ aws eks create-addon \
  --cluster-name CLUSTER_NAME \
  --addon-name cert-manager \
  --addon-version v1.19.1-eksbuild.1 \
  --pod-identity-associations serviceAccount=cert-manager,roleArn=ROLE_ARN

An error occurred (InvalidParameterException) when calling the CreateAddon operation: Pod Identity feature is not supported for addon version: v1.19.1-eksbuild.1

Executing the following separately increases management costs:

• Creating EKS Community Add-ons "cert-manager"
• Configuring Pod Identity

Are you currently working around this issue? After creating EKS Community Add-ons "cert-manager", we need to configure Pod Identity separately.