From 07be801a12cfaa6c65ac63a2ff8417412d8ecd38 Mon Sep 17 00:00:00 2001
From: Ciprian Hacman <ciprian.hacman@sematext.com>
Date: Sat, 12 Sep 2020 08:20:17 +0300
Subject: [PATCH] Only add additional policies to kops managed IAMRoles

---
 pkg/model/iam.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/model/iam.go b/pkg/model/iam.go
index ece4b4127b..f09abe4853 100644
--- a/pkg/model/iam.go
+++ b/pkg/model/iam.go
@@ -263,7 +263,7 @@ func (b *IAMModelBuilder) buildIAMTasks(role iam.Subject, iamName string, c *fi.
 		}
 
 		// Generate additional policies if needed, and attach to existing role
-		{
+		if !shared {
 			additionalPolicy := ""
 			if b.Cluster.Spec.AdditionalPolicies != nil {
 				additionalPolicies := *(b.Cluster.Spec.AdditionalPolicies)