Help improve this page
Want to contribute to this user guide? Scroll to the bottom of this page and select Edit this page on GitHub. Your contributions will help make our user guide better for everyone.
Amazon EFS CSI driver
The Amazon EFS CSI driver Amazon EKS add-on is a Kubernetes Container Storage Interface (CSI) plugin that provides Amazon EFS storage for your cluster.
The Amazon EKS add-on name is aws-efs-csi-driver
.
Important
The Amazon EFS driver is only available as a self-managed installation in this
Amazon Web Services Region. For instructions on how to add it as a self-managed
installation, see Installation
Required IAM permissions
Required IAM permissions –
This add-on utilizes the IAM roles for
service accounts capability of Amazon EKS. The permissions in the
AmazonEFSCSIDriverPolicy
Amazon managed policy are required. You can create an IAM role and
attach the managed policy to it with the following commands. Replace
with the name
of your cluster and
my-cluster
with the name for your role. These commands require that you have AmazonEKS_EFS_CSI_DriverRole
eksctl
export cluster_name=
my-cluster
export role_name=AmazonEKS_EFS_CSI_DriverRole
eksctl create iamserviceaccount \ --name efs-csi-controller-sa \ --namespace kube-system \ --cluster $cluster_name \ --role-name $role_name \ --role-only \ --attach-policy-arn arn:aws-cn:iam::aws:policy/service-role/AmazonEFSCSIDriverPolicy \ --approve TRUST_POLICY=$(aws iam get-role --role-name $role_name --query 'Role.AssumeRolePolicyDocument' | \ sed -e 's/efs-csi-controller-sa/efs-csi-*/' -e 's/StringEquals/StringLike/') aws iam update-assume-role-policy --role-name $role_name --policy-document "$TRUST_POLICY"
Additional information
To learn more about the add-on, see Use Amazon EFS storage.