How can I properly configure tolerations for the AWS EBS CSI Driver add-on in EKS using Terraform?

I'm deploying Cilium in my EKS cluster and need to add a taint to my node groups:

YAMLCopied
taints:
   - key: "node.cilium.io/agent-not-ready"
     value: "true"
     effect: "NoExecute"

I also deploy EKS add-ons (VPC CNI, EBS CSI, Kube Proxy, and CoreDNS). While I managed to configure VPC CNI, Kube Proxy, and CoreDNS using tolerations (as shown by the output of the aws eks describe-addon-configuration command), the AWS EBS CSI Driver still errors out.

After running:

BASHCopied
aws eks describe-addon-configuration --addon-name aws-ebs-csi-driver --addon-version v1.38.1-eksbuild.2 | jq ".configurationSchema" | jq "fromjson" | jq ".properties.node.properties.tolerations"

I receive the following output:

JSONCopied
{
  "default": [
    {
      "effect": "NoExecute",
      "operator": "Exists",
      "tolerationSeconds": 300
    }
  ],
  "description": "Tolerations of the node pod",
  "items": {
    "type": "object"
  },
  "type": "array"
}

My current Terraform configuration is as follows:

HCLCopied
configuration_values = jsonencode({
tolerations = [{
  "key" : "node.cilium.io/agent-not-ready",
  "operator": "Equal",
  "value": "true",
  "effect" : "NoExecute"
}]
})

However, I still receive the error:

InvalidParameterException: ConfigurationValue provided in request is not supported: Json schema validation failed with error: [$.tolerations: is not defined in the schema and the schema does not allow additional properties]

I suspect the tolerations need to be nested correctly (i.e. under the "node" key) as indicated in the configuration schema. How can I adjust my Terraform configuration so that it complies with the expected schema for the AWS EBS CSI Driver add-on?