add node role policy disclaimer

Signed-off-by: Manabu McCloskey <[email protected]>
awslabs · Jan 14, 2025 · b0910d2 · b0910d2
1 parent ea0c483
commit b0910d2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/analytics/terraform/spark-k8s-operator/addons.tf b/analytics/terraform/spark-k8s-operator/addons.tf
@@ -658,6 +658,8 @@ resource "aws_secretsmanager_secret_version" "grafana" {
 
 #---------------------------------------------------------------
 # S3Table IAM policy for Karpenter nodes
+# The S3 tables library does not fully support IRSA and Pod Identity as of this writing.
+# We give the node role access to S3tables to work around this limitation.
 #---------------------------------------------------------------
 resource "aws_iam_policy" "s3tables_policy" {
   name_prefix = "${local.name}-s3tables"