diff options
Diffstat (limited to 'hacking/aws_config')
-rw-r--r-- | hacking/aws_config/testing_policies/compute-policy.json | 3 | ||||
-rw-r--r-- | hacking/aws_config/testing_policies/container-policy.json (renamed from hacking/aws_config/testing_policies/ecs-policy.json) | 14 |
2 files changed, 16 insertions, 1 deletions
diff --git a/hacking/aws_config/testing_policies/compute-policy.json b/hacking/aws_config/testing_policies/compute-policy.json index be4c4d0d51..1e7171ce53 100644 --- a/hacking/aws_config/testing_policies/compute-policy.json +++ b/hacking/aws_config/testing_policies/compute-policy.json @@ -212,7 +212,8 @@ "Resource": [ "arn:aws:iam::{{aws_account}}:role/ansible_lambda_role", "arn:aws:iam::{{aws_account}}:role/ecsInstanceRole", - "arn:aws:iam::{{aws_account}}:role/ecsServiceRole" + "arn:aws:iam::{{aws_account}}:role/ecsServiceRole", + "arn:aws:iam::{{aws_account}}:role/aws_eks_cluster_role" ] }, { diff --git a/hacking/aws_config/testing_policies/ecs-policy.json b/hacking/aws_config/testing_policies/container-policy.json index 19db32c8ae..225efc7dfa 100644 --- a/hacking/aws_config/testing_policies/ecs-policy.json +++ b/hacking/aws_config/testing_policies/container-policy.json @@ -56,6 +56,20 @@ "Resource": [ "*" ] + }, + { + "Effect": "Allow", + "Action": [ + "eks:CreateCluster", + "eks:DeleteCluster", + "eks:DescribeCluster", + "eks:ListClusters" + ], + "Resource": [ + "*" + ] } + + ] } |