enable_secrets_store_csi_driver_provider_aws : Namespace kube-system already exists

[AndiB42]

Hello together,

we wanted to enable the secret_store_csi_driver_provider_aws and we're following the documentation here: https://aws-ia.github.io/terraform-aws-eks-blueprints/v4.18.1/add-ons/csi-secrets-store-provider-aws/#usage

We've got this issue:

It seems, that the configuration of the kubernetes_namespace_v1 resource is not configured as the other addon-modules.
We've tested it locally and found a solution, which would be also a proposal for a Pull-Request:

First:
Because of duplicated cluster-roles, we'd to set the variables like so:

enable_secrets_store_csi_driver = false
enable_secrets_store_csi_driver_provider_aws = true

Second:
in the main.tf of the csi-secrets-store-provider-aws module, we've added this part in line 7:

  count = try(var.helm_config.create_namespace, true) && local.namespace != "kube-system" ? 1 : 0

and of course, the new usage needs to be adapted, like this:

 try(kubernetes_namespace_v1.csi_secrets_store_provider_aws[0].metadata[0].name, local.namespace)

After these steps, it works.
Would you also agree to this proposal?
Or were we misleaded through probably outdated documentation, and maybe it's just necessary to update the documentation?

Thanks in advance for your feedback

[github-actions]

This issue has been automatically marked as stale because it has been open 30 days
with no activity. Remove stale label or comment or this issue will be closed in 10 days

[github-actions]

Issue closed due to inactivity.