kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove unnecessary IAM permission

This commit is contained in:
John Gardiner Myers 2021-07-23 14:03:41 -07:00
parent e014fce41d
commit b94bcafe56
2 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/model/alimodel/policy_builder.go
View File

@ -280,7 +280,6 @@ func (b *PolicyBuilder) AddOSSPermissions(p *Policy) (*Policy, error) {
strings.Join([]string{b.RAMPrefix(), ":oss:*:*:", ramOSSPath, "/config"}, ""),
strings.Join([]string{b.RAMPrefix(), ":oss:*:*:", ramOSSPath, "/instancegroup/*"}, ""),
strings.Join([]string{b.RAMPrefix(), ":oss:*:*:", ramOSSPath, "/pki/private/kube-proxy/*"}, ""),
strings.Join([]string{b.RAMPrefix(), ":oss:*:*:", ramOSSPath, "/pki/ssh/*"}, ""),
strings.Join([]string{b.RAMPrefix(), ":oss:*:*:", ramOSSPath, "/secrets/dockerconfig"}, ""),
}

1
pkg/model/iam/iam_builder.go
View File

@ -633,7 +633,6 @@ func ReadableStatePaths(cluster *kops.Cluster, role Subject) ([]string, error) {
"/addons/*",
"/cluster-completed.spec",
"/igconfig/node/*",
"/pki/ssh/*",
"/secrets/dockerconfig",
)