Merge pull request #27794 from justinsb/fix_27467

Automatic merge from submit-queue

AWS kube-up: Authorize route53 in the IAM policy

Federation needs this now (on the nodes), and I suspect ingress
controllers will shortly want this also.  Given we're going to authorize
it on the nodes, we should authorize it on the master also (the master
is much more trusted).

Fix #27467

cluster/aws/templates/iam/kubernetes-master-policy.json

@@ -11,6 +11,11 @@
       "Action": ["elasticloadbalancing:*"],
       "Resource": ["*"]
     },
+    {
+      "Effect": "Allow",
+      "Action": ["route53:*"],
+      "Resource": ["*"]
+    },
     {
       "Effect": "Allow",
       "Action": "s3:*",

cluster/aws/templates/iam/kubernetes-minion-policy.json

@@ -23,6 +23,11 @@
       "Action": "ec2:DetachVolume",
       "Resource": "*"
     },
+    {
+      "Effect": "Allow",
+      "Action": ["route53:*"],
+      "Resource": ["*"]
+    },
     {
       "Effect": "Allow",
       "Action": [