allow for predefined irsa policies

[miguelhar]

variable "irsa_policies" {
  description = "Mappings for custom IRSA configurations."
  type = list(object({
    name                = string
    namespace           = string
    serviceaccount_name = string
    policy              = optional(string) #json
    pod_identity        = optional(bool, false)
  }))

If you omit policy it will try to find it in ./modules/irsa/apps-policies/ which allows for predefined policies as well the case where one wants to overwrite the policy or just not use a predefined.

when pod_identity = true it will create the aws_eks_pod_identity_association and a different trust policy for the role

roles:

./tf.sh cluster output_json irsa | jq .irsa.value.roles

[miguelhar]

can use data "aws_region" "current" {} instead, no need to pass it through

[miguelhar]

add new line

[miguelhar]

add new line