mirror of https://github.com/kubernetes/kops.git
34473e8602
Automatic merge from submit-queue Allow the strict IAM policies to be optional The stricter IAM policies could potentially cause regression for some edge-cases, or may rely on nodeup image changes that haven't yet been deployed / tagged officially (currently the case on master branch since PR https://github.com/kubernetes/kops/pull/3158 was merged in). This PR just wraps the new IAM policy rules around a cluster spec flag, `EnableStrictIAM`, so will default to the original behaviour (where the S3 policies were completely open). Could also be used to wrap PR https://github.com/kubernetes/kops/pull/3186 if it progresses any further. - Or we could reject this and have the policies always strict! :) |
||
|---|---|---|
| .. | ||
| awsmodel | ||
| components | ||
| gcemodel | ||
| iam | ||
| resources | ||
| tests/data | ||
| vspheremodel | ||
| bastion.go | ||
| bootstrapscript.go | ||
| bootstrapscript_test.go | ||
| context.go | ||
| context_test.go | ||
| convenience.go | ||
| dns.go | ||
| external_access.go | ||
| firewall.go | ||
| iam.go | ||
| master_volumes.go | ||
| names.go | ||
| network.go | ||
| pki.go | ||
| sshkey.go | ||
| template_resource.go | ||