Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-12-25 07:29:38 -05:00
Code Issues Packages Projects Releases Wiki Activity

terraform: add necessary IAM permissions for AWS

Browse Source
This commit is contained in:
Leonard Cohnen 2022-10-24 23:35:51 +02:00 committed by 3u13r
parent be2b38f2ac
commit d979aeea2d
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
hack/terraform/aws/iam/main.tf
View File

@ -105,7 +105,11 @@ resource "aws_iam_policy" "control_plane_policy" {
"elasticloadbalancing:DeregisterTargets", "elasticloadbalancing:DeregisterTargets",
"elasticloadbalancing:SetLoadBalancerPoliciesOfListener", "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
"iam:CreateServiceLinkedRole", "iam:CreateServiceLinkedRole",
"kms:DescribeKey" "kms:DescribeKey",
"logs:DescribeLogGroups",
"logs:ListTagsLogGroup",
"logs:CreateLogStream",
"tag:GetResources"
], ],
"Resource": [ "Resource": [
"*" "*"
@ -164,7 +168,11 @@ resource "aws_iam_policy" "worker_node_policy" {
"ecr:GetRepositoryPolicy", "ecr:GetRepositoryPolicy",
"ecr:DescribeRepositories", "ecr:DescribeRepositories",
"ecr:ListImages", "ecr:ListImages",
"ecr:BatchGetImage" "ecr:BatchGetImage",
"logs:DescribeLogGroups",
"logs:ListTagsLogGroup",
"logs:CreateLogStream",
"tag:GetResources"
], ],
"Resource": "*" "Resource": "*"
} }