AWS EKS: Creating Network Load Balancer error - amazon-web-services

Question

I have a EKS cluster via Terraform. I want to deploy NLB on ignite namespace
I created Load Balancer Controller:
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/name: aws-load-balancer-controller
name: aws-load-balancer-controller
namespace: kube-system
annotations:
eks.amazonaws.com/role-arn: ${ROLE_ARN}
This is the load balancer that I'm trying to make it NLB
apiVersion: v1
kind: Service
metadata:
# The name must be equal to KubernetesConnectionConfiguration.serviceName
name: ignite-service
# The name must be equal to KubernetesConnectionConfiguration.namespace
namespace: ignite
annotations:
service.beta.kubernetes.io/aws-load-balancer-type: external
service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
labels:
app: ignite
spec:
type: LoadBalancer
ports:
- name: rest
port: 8080
targetPort: 8080
- name: thinclients
port: 10800
targetPort: 10800
# Optional - remove 'sessionAffinity' property if the cluster
# and applications are deployed within Kubernetes
# sessionAffinity: ClientIP
selector:
# Must be equal to the label set for pods.
app: ignite
status:
loadBalancer: {}
It's throwing error of
> Warning FailedBuildModel 60s service Failed build model due to WebIdentityErr: failed to retrieve credentials caused by:
> AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity
Weird thing is if I make the annotations with these configurations
Annotations:
service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
service.beta.kubernetes.io/aws-load-balancer-scheme: internal
service.beta.kubernetes.io/aws-load-balancer-type: instance
Then it won't throw the AssumeRole error, but it will create internet-facing ELB.
How do I create NLB without either assumerole error or not creating ELB error?