kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add missing lbc permission

This commit is contained in:
Ole Markus With 2021-06-19 13:46:14 +02:00
parent cc24bbb3c1
commit 778323eec9
3 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/model/iam/iam_builder.go
View File

@ -731,6 +731,7 @@ func AddAWSLoadbalancerControllerPermissions(p *Policy, resource stringorslice.S
Effect: StatementEffectAllow,
Action: stringorslice.Of(
"ec2:DescribeAvailabilityZones",
"ec2:DescribeNetworkInterfaces",
),
Resource: stringorslice.Slice([]string{"*"}),
},

5
tests/integration/update_cluster/aws-lb-controller/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
View File

@ -1,7 +1,10 @@
{
"Statement": [
{
"Action": "ec2:DescribeAvailabilityZones",
"Action": [
"ec2:DescribeAvailabilityZones",
"ec2:DescribeNetworkInterfaces"
],
"Effect": "Allow",
"Resource": [
"*"

5
tests/integration/update_cluster/many-addons/data/aws_iam_role_policy_masters.minimal.example.com_policy
View File

@ -210,7 +210,10 @@
]
},
{
"Action": "ec2:DescribeAvailabilityZones",
"Action": [
"ec2:DescribeAvailabilityZones",
"ec2:DescribeNetworkInterfaces"
],
"Effect": "Allow",
"Resource": [
"*"