Add crossplane IAM Roles for control plane nodes

Author: fiunchinho

helm/cluster-aws/templates/_aws_cluster.tpl

@@ -255,7 +255,7 @@ spec:
     {{- end }}
   sshKeyName: ssh-key
   s3Bucket:
-    controlPlaneIAMInstanceProfile: control-plane-{{ include "resource.default.name" $ }}
+    controlPlaneIAMInstanceProfile: {{ include "resource.default.name" $ }}-control-plane
     name: {{ include "aws-region" . }}-capa-{{ include "resource.default.name" $ }}
     nodesIAMInstanceProfiles:
     - {{ include "resource.default.name" $ }}-worker

helm/cluster-aws/templates/crossplane-iam-role-control-plane.yaml

@@ -15,7 +15,7 @@ spec:
           {
             "Effect": "Allow",
             "Principal": {
-              "Service": "ec2.amazonaws.com{{- if hasPrefix "cn-" .Values.awsRegion }}.cn{{- end }}"
+              "Service": "ec2.amazonaws.com{{- if hasPrefix "cn-" (include "aws-region" .) }}.cn{{- end }}"
             },
             "Action": "sts:AssumeRole"
           }

helm/cluster-aws/templates/crossplane-iam-role-worker.yaml

@@ -15,7 +15,7 @@ spec:
           {
             "Effect": "Allow",
             "Principal": {
-              "Service": "ec2.amazonaws.com{{- if hasPrefix "cn-" .Values.awsRegion }}.cn{{- end }}"
+              "Service": "ec2.amazonaws.com{{- if hasPrefix "cn-" (include "aws-region" .) }}.cn{{- end }}"
             },
             "Action": "sts:AssumeRole"
           }