Update IAM permissions for minion, to allow EBS

2025-09-03 10:17:46 +00:00 · 2015-04-02 11:00:36 -07:00
parent e56e2ee46a
commit 49543aca61
1 changed files with 15 additions and 0 deletions
--- a/cluster/aws/templates/iam/kubernetes-minion-policy.json
+++ b/cluster/aws/templates/iam/kubernetes-minion-policy.json
@@ -7,6 +7,21 @@
      "Resource": [
        "arn:aws:s3:::kubernetes-*"
      ]
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:Describe*",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:AttachVolume",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:DetachVolume",
+      "Resource": "*"
    }
  ]
 }