kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add comment to remove unused IAM permissions in the future

This commit is contained in:
Peter Rifel 2024-01-03 21:19:05 -06:00
parent 85da9fb918
commit 349de70cda
No known key found for this signature in database
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkg/model/iam/iam_builder.go
View File

@ -1116,6 +1116,9 @@ func addASLifecyclePolicies(p *Policy, enableHookSupport bool) {
"autoscaling:DescribeLifecycleHooks", "autoscaling:DescribeLifecycleHooks",
) )
} }
// TODO: remove this after k8s 1.29 support is removed
// It is no longer needed as of kops 1.29 but to prevent node bootstrap issues
// during kops upgrades we keep the permission until it is guaranteed to not be needed.
p.unconditionalAction.Insert( p.unconditionalAction.Insert(
"autoscaling:DescribeAutoScalingInstances", "autoscaling:DescribeAutoScalingInstances",
) )