eksctl create iamserviceaccount  --name iam-test  --namespace default --cluster $CLUSTER_NAME  --attach-policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess  --approve  --override-existing-serviceaccounts