FSxN module - update lab doc with the new pod identity changes

Author: mickeysh

manifests/modules/fundamentals/storage/fsxn/.workshop/terraform/main.tf

@@ -1,7 +1,3 @@
-
-data "aws_caller_identity" "current" {}
-data "aws_region" "current" {}
-
 resource "aws_iam_policy" "fsxn-csi-policy" {
   name        = "${var.addon_context.eks_cluster_id}-fsxn-csi-${random_string.suffix.result}"
   description = "FSxN CSI Driver Policy"
@@ -38,25 +34,6 @@ data "aws_secretsmanager_secret" "fsxn_password_secret" {
   name = "${var.addon_context.eks_cluster_id}-fsxn-secret"
   depends_on = [ module.preprovision ]
 }
-# module "iam_iam-role-for-service-accounts-eks" {
-#   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-#   version = "5.37.1"
-
-#   role_name              = "${var.addon_context.eks_cluster_id}-fsxn-csi-${random_string.suffix.result}"
-#   allow_self_assume_role = true
-
-#   oidc_providers = {
-#     eks = {
-#       provider_arn               = var.addon_context.eks_oidc_provider_arn
-#       namespace_service_accounts = ["${local.k8s_service_account_namespace}:${local.k8s_service_account_name}"]
-#     }
-#   }
-
-#   role_policy_arns = {
-#     additional           = aws_iam_policy.fsxn-csi-policy.arn
-#   }
-
-# }
 
 resource "aws_eks_addon" "eks-pod-identity-agent" {
   cluster_name                = var.eks_cluster_id

website/docs/fundamentals/storage/fsx-for-netapp-ontap/fsxn-csi-driver.md

@@ -12,7 +12,7 @@ In order to utilize Amazon FSx for NetApp ONTAP file system with dynamic provisi
 We can install the Amazon FSxN for NetApp ONTAP Trident CSI driver using helm. We will need to provide a required IAM role that has already been created for us as part fo the preperation for the workshop. 
 ```bash
 $ helm repo add netapp-trident https://netapp.github.io/trident-helm-chart
-$ helm install trident-operator netapp-trident/trident-operator --version 100.2410.0 --namespace trident --create-namespace --set cloudProvider=$CLOUD_PROVIDER --set cloudIdentity="$CLOUD_IDENTITY"
+$ helm install trident-operator netapp-trident/trident-operator --version 100.2410.0 --namespace trident --create-namespace
 ```
 
 
@@ -30,7 +30,8 @@ trident-operator-588c7c854d-t4c4x   1/1     Running   0          102s
 
 The FSx for NetApp ONTAP CSI driver supports dynamic and static provisioning. Currently dynamic provisioning creates an access point for each PersistentVolume. This mean an AWS EFS file system has to be created manually on AWS first and should be provided as an input to the StorageClass parameter. For static provisioning, AWS EFS file system needs to be created manually on AWS first. After that it can be mounted inside a container as a volume using the driver.
 
-The workshop environment also has an FSx for NetApp ONTAP file system, Storage Virtual Machine (SVM) and the required security group pre-provisioned with an inbound rule that allows inbound NFS traffic for your Pods. You can retrieve information about the FSx for NetApp ONTAP file system by running the following AWS CLI command:
+The workshop environment also has an FSx for NetApp ONTAP file system, Storage Virtual Machine (SVM) and the required security group pre-provisioned with an inbound rule that allows inbound NFS traffic for your Pods. 
+Retrieve the information about the FSx for NetApp ONTAP file system by running the following AWS CLI command:
 
 ```bash
 $ export FSXN_ID=$(aws fsx describe-file-systems --query 'FileSystems[?not_null(Tags[?Key==`Name` && Value==`eks-workshop-fsxn`])].FileSystemId' --output text)
@@ -39,7 +40,8 @@ $ export FSXN_ID=$(aws fsx describe-file-systems --query 'FileSystems[?not_null(
 Now, we'll need to create a TridentBackendConfig object configured to use the pre-provisioned FSx for NetApp ONTAP file system as part of this workshop infrastructure.
 
 We'll be using Kustomize to create the backend and to ingest the following environment variables values in the configuration of the trident backend config object:
- - `FSXN_ID` in the parameter`fsxFilesystemID`
+ - `FSXN_ID` in the parameter`fsxFilesystemID` - This the FSxN filesystem we're going to connect our CSI driver too. 
+ - `FSXN_SECRET_ARN` in the parameter `credentials.name` - This is the secret ARN with the credentials to connect to the ONTAP API interface. 
 
 ```file
 manifests/modules/fundamentals/storage/fsxn/backend/fsxn-backend-nas.yaml