Corrected externalPolicy

AWS IAM resource ID's were in an incorrect format.
This commit is contained in:
Timothy Clarke 2021-01-29 13:01:11 +00:00 committed by GitHub
parent 3d39be7721
commit 04be48a8cd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions

View File

@ -81,11 +81,11 @@ Policy Overrides are specified by their ARN on AWS and are grouped by their role
spec: spec:
externalPolicies: externalPolicies:
node: node:
- aws:arn:iam:123456789000:policy:test-policy - arn:aws:iam::123456789000:policy/test-policy
master: master:
- aws:arn:iam:123456789000:policy:test-policy - arn:aws:iam::123456789000:policy/test-policy
bastion: bastion:
- aws:arn:iam:123456789000:policy:test-policy - arn:aws:iam::123456789000:policy/test-policy
``` ```
External Policy attachments are treated declaritively. Any policies declared will be attached to the role, any policies not specified will be detached _after_ new policies are attached. This does not replace or affect built in kOps policies in any way. External Policy attachments are treated declaritively. Any policies declared will be attached to the role, any policies not specified will be detached _after_ new policies are attached. This does not replace or affect built in kOps policies in any way.