feat: 🎸 wip

locals.tf

@@ -40,6 +40,8 @@ locals {
     thanosrulers         = "https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/${var.prometheus_operator_crd_version}/example/prometheus-operator-crd/monitoring.coreos.com_thanosrulers.yaml"
   }
 
+  prometheus_sa_name = "prometheus-operator-kube-p-prometheus"
+
   ecr_exporter_sa = "ecr-exporter"
 }
 

prometheus.tf

@@ -123,6 +123,7 @@ resource "helm_release" "prometheus_operator_eks" {
     enable_prometheus_affinity_and_tolerations = var.enable_prometheus_affinity_and_tolerations
     enable_thanos_sidecar                      = var.enable_thanos_sidecar
     enable_large_nodesgroup                    = var.enable_large_nodesgroup
+    prometheus_sa_name                         = local.prometheus_sa_name
     eks_service_account                        = module.iam_assumable_role_monitoring.this_iam_role_arn
     storage_class                              = can(regex("live", terraform.workspace)) ? "io1-expand" : "gp2-expand"
     storage_size                               = can(regex("live", terraform.workspace)) ? "750Gi" : "75Gi"

templates/prometheus-operator-eks.yaml.tpl

@@ -407,9 +407,12 @@ prometheus:
   enabled: true
 
   serviceAccount:
+    create: true
+    name: "${prometheus_sa_name}"
     annotations:
       eks.amazonaws.com/role-arn: "${eks_service_account}"
 
+
   # Service for thanos service discovery on sidecar
   # Enable this can make Thanos Query can use
   # `--store=dnssrv+_grpc._tcp.$kube-prometheus-stack.fullname-thanos-discovery.$namespace.svc.cluster.local` to discovery

thanos.tf

@@ -14,6 +14,7 @@ resource "helm_release" "thanos" {
   version    = "15.0.0"
   timeout    = 900
   values = [templatefile("${path.module}/templates/thanos-values.yaml.tpl", {
+    prometheus_sa_name  = local.prometheus_sa_name
     enabled_compact     = var.enable_thanos_compact
     monitoring_aws_role = module.iam_assumable_role_monitoring.this_iam_role_name
     clusterName         = terraform.workspace