Skip to content

K
k3s
Commit 62ce6698 authored by k8s-merge-robot's avatar k8s-merge-robot Committed by GitHub
Browse files
Options

Merge pull request #27794 from justinsb/fix_27467

Automatic merge from submit-queue AWS kube-up: Authorize route53 in the IAM policy Federation needs this now (on the nodes), and I suspect ingress controllers will shortly want this also. Given we're going to authorize it on the nodes, we should authorize it on the master also (the master is much more trusted). Fix #27467
parents 8b817c4a f3cc5f50
Hide whitespace changes
Inline Side-by-side
Showing with 10 additions and 0 deletions
cluster/aws/templates/iam/kubernetes-master-policy.json
View file @ 62ce6698
...@@ -13,6 +13,11 @@ ...@@ -13,6 +13,11 @@
}, },
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": ["route53:*"],
"Resource": ["*"]
},
{
"Effect": "Allow",
"Action": "s3:*", "Action": "s3:*",
"Resource": [ "Resource": [
"arn:aws:s3:::kubernetes-*" "arn:aws:s3:::kubernetes-*"
......
cluster/aws/templates/iam/kubernetes-minion-policy.json
View file @ 62ce6698
...@@ -25,6 +25,11 @@ ...@@ -25,6 +25,11 @@
}, },
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": ["route53:*"],
"Resource": ["*"]
},
{
"Effect": "Allow",
"Action": [ "Action": [
"ecr:GetAuthorizationToken", "ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability", "ecr:BatchCheckLayerAvailability",
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment