[Bug] Updating pod identity association conflict #8484
Description
What were you trying to accomplish?
eksctl update podidentityassociation -f config.yaml
What happened?
Updating podidentity association for a namespace when another namespace that includes the first namespace causes wrong cloudformation stack to be updated.
How to reproduce it?
example setup:
- namespace service has pod identity association service-account
- namespace other-service has pod identity association service-account
Trying to update pod identity association for service causes pod identity association for other-service to be updated.
I think it has to do with how the pod identity association cloudformation stacks are matched using this code:
func getIAMResourcesStack(stackNames []string, p Identifier) (string, bool) {
for _, name := range stackNames {
if strings.Contains(name, p.NameString()) {
return name, true
}
}
return "", false
}