support multiple role arns in karpenter

README.md

@@ -38,8 +38,9 @@ Truefoundry AWS Karpenter Module
 
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
+| <a name="input_additional_controller_node_iam_role_arns"></a> [additional\_controller\_node\_iam\_role\_arns](#input\_additional\_controller\_node\_iam\_role\_arns) | The additional node iam roles to be used by karpenter | `list(string)` | `[]` | no |
 | <a name="input_cluster_name"></a> [cluster\_name](#input\_cluster\_name) | Cluster Name to install karpenter | `string` | n/a | yes |
-| <a name="input_controller_node_iam_role_arn"></a> [controller\_node\_iam\_role\_arn](#input\_controller\_node\_iam\_role\_arn) | The initial node iam role arn | `string` | n/a | yes |
+| <a name="input_controller_node_iam_role_arn"></a> [controller\_node\_iam\_role\_arn](#input\_controller\_node\_iam\_role\_arn) | The node iam role for the initial node group to be used by karpenter | `string` | n/a | yes |
 | <a name="input_controller_nodegroup_name"></a> [controller\_nodegroup\_name](#input\_controller\_nodegroup\_name) | The initial nodegroup name | `string` | n/a | yes |
 | <a name="input_k8s_service_account_name"></a> [k8s\_service\_account\_name](#input\_k8s\_service\_account\_name) | The k8s karpenter service account name | `string` | n/a | yes |
 | <a name="input_k8s_service_account_namespace"></a> [k8s\_service\_account\_namespace](#input\_k8s\_service\_account\_namespace) | The k8s karpenter namespace | `string` | n/a | yes |

main.tf

@@ -7,7 +7,7 @@ module "karpenter_irsa_role" {
   attach_karpenter_controller_policy = true
 
   karpenter_controller_cluster_id         = var.cluster_name
-  karpenter_controller_node_iam_role_arns = [var.controller_node_iam_role_arn]
+  karpenter_controller_node_iam_role_arns = flatten([var.controller_node_iam_role_arn, var.additional_controller_node_iam_role_arns])
 
   attach_vpc_cni_policy = true
   vpc_cni_enable_ipv4   = true

variables.tf

@@ -19,10 +19,16 @@ variable "oidc_provider_arn" {
 }
 
 variable "controller_node_iam_role_arn" {
-  description = "The initial node iam role arn"
+  description = "The node iam role for the initial node group to be used by karpenter"
   type        = string
 }
 
+variable "additional_controller_node_iam_role_arns" {
+  description = "The additional node iam roles to be used by karpenter"
+  type        = list(string)
+  default = []
+}
+
 variable "controller_nodegroup_name" {
   description = "The initial nodegroup name"
   type        = string