Split IAM policies according to upstream

[nantiferov]

Is your request related to a new offering from AWS?

No

Is your request related to a problem? Please describe.

In the past there was a problem with IAM policy reaching limits for clusters with long names.

Workaround was released for module (PR), but now Karpenter project split IAM policies in this PR, so I think workaround can be removed and module IAM sync with upstream.

Related issue in Karpenter repo aws/karpenter-provider-aws#7874 (comment)

Describe the solution you'd like.

Sync module IAM policies with upstream Karpenter - i.e. split them.

Describe alternatives you've considered.

Current workaround works, but I think would be better to eliminate issue with IAM policy size completely.

P.S. Workaround is enable_inline_policy = true

Additional context

I can try to create PR little bit later this week.

[github-actions]

This issue has been automatically marked as stale because it has been open 30 days
with no activity. Remove stale label or comment or this issue will be closed in 10 days

[nantiferov]

Not stale

[github-actions]

This issue has been automatically marked as stale because it has been open 30 days
with no activity. Remove stale label or comment or this issue will be closed in 10 days

[nantiferov]

Not stale

[kris-runzer]

We had to version lock to v21.17.1 due to recent addition of placement-group in the controller policy causing the length of a single IAM policy to be excdeeded.

Would be nice for this to get some priority!

[bryantbiggs]

We had to version lock to v21.17.1 due to recent addition of placement-group in the controller policy causing the length of a single IAM policy to be excdeeded.

Would be nice for this to get some priority!

would be nice to get paid! or for folks to read the docs

terraform-aws-eks/modules/karpenter/variables.tf

Lines 35 to 39 in ed7f4d5

	variable "enable_inline_policy" {
	description = "Determines whether the controller policy is created as a standard IAM policy or inline IAM policy. This can be enabled when the error `LimitExceeded: Cannot exceed quota for PolicySize: 6144` is received since standard IAM policies have a limit of 6,144 characters versus an inline role policy's limit of 10,240 ([Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html))"
	type = bool
	default = false
	}