Create policy.json.template

Author: DickChesterwood

_course_files/Intel_AMD_Edition/Chapter 13 AWS/ebs-csi-driver-install/policy.json.template

@@ -0,0 +1,18 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "Federated": "arn:aws:iam::${account_id}:oidc-provider/oidc.eks.${region}.amazonaws.com/id/${oidc_id}"
+      },
+      "Action": "sts:AssumeRoleWithWebIdentity",
+      "Condition": {
+        "StringEquals": {
+          "oidc.eks.${region}.amazonaws.com/id/${oidc_id}:aud": "sts.amazonaws.com",
+          "oidc.eks.${region}.amazonaws.com/id/${oidc_id}:sub": "system:serviceaccount:kube-system:ebs-csi-controller-sa"
+        }
+      }
+    }
+  ]
+}