Save the cluster creator role about terraform-aws-eks-cluster HOT 2 OPEN

I think this is a smart move to implement 👍 Would definitely save a bunch of people who aren't sophisticated terraform / EKS operators from losing track of the role / user that created their cluster.

from terraform-aws-eks-cluster.

In all honesty, it's not really a requirement the majority would expect to find in a shared module, it seems more like a personal needing to me, most of us aren't relying at all to that initial role.
First and foremost, you should deploy using a pipeline which should be set with a pre-definied role, so you shouldn't wonder what it was, also because you usually want to set a specific role with the right permission to deploy not a multitude of roles. If you have a a number of devs deploying clusters, then you can use something like terragrunt to set a tag for you:

createdby = split("/", get_aws_caller_identity_arn())[1]

Or you can use plain terraform with data "aws_caller_identity" "current" {} to get the arn and set it as a tag.

Anyway, in my opinion the best choice is to add a predefined role using the map_additional_iam_roles feature of this module, first you're not exposing anything as a tag. and second getting the exact role might be challenging if there an "assume_role" in the mix.

from terraform-aws-eks-cluster.