Revert "Revert "Restrict master access to state store bucket""

This reverts commit c11a370c9a.
2016-08-27 17:37:55 -04:00 · 2016-08-27 17:37:55 -04:00 · 4df50773c1
parent 4608ef57ef
commit 4df50773c1
1 changed files with 2 additions and 1 deletions
--- a/upup/models/cloudup/_aws/resources/iam/kubernetes-master-policy.json.template
+++ b/upup/models/cloudup/_aws/resources/iam/kubernetes-master-policy.json.template
@ -24,7 +24,8 @@
      "Resource": [
        {{ range $i, $b := .MasterPermissions.S3Buckets }}
        {{if $i}},{{end}}
-        "{{ IAMPrefix }}:s3:::{{ $b }}/*"
+        "{{ IAMPrefix }}:s3:::{{ $b }}/{{ ClusterName }}",
+        "{{ IAMPrefix }}:s3:::{{ $b }}/{{ ClusterName }}/*"
        {{ end }}
      ]
    },