summaryrefslogtreecommitdiff
path: root/hacking/aws_config
diff options
context:
space:
mode:
Diffstat (limited to 'hacking/aws_config')
-rw-r--r--hacking/aws_config/testing_policies/compute-policy.json3
-rw-r--r--hacking/aws_config/testing_policies/container-policy.json (renamed from hacking/aws_config/testing_policies/ecs-policy.json)14
2 files changed, 16 insertions, 1 deletions
diff --git a/hacking/aws_config/testing_policies/compute-policy.json b/hacking/aws_config/testing_policies/compute-policy.json
index be4c4d0d51..1e7171ce53 100644
--- a/hacking/aws_config/testing_policies/compute-policy.json
+++ b/hacking/aws_config/testing_policies/compute-policy.json
@@ -212,7 +212,8 @@
"Resource": [
"arn:aws:iam::{{aws_account}}:role/ansible_lambda_role",
"arn:aws:iam::{{aws_account}}:role/ecsInstanceRole",
- "arn:aws:iam::{{aws_account}}:role/ecsServiceRole"
+ "arn:aws:iam::{{aws_account}}:role/ecsServiceRole",
+ "arn:aws:iam::{{aws_account}}:role/aws_eks_cluster_role"
]
},
{
diff --git a/hacking/aws_config/testing_policies/ecs-policy.json b/hacking/aws_config/testing_policies/container-policy.json
index 19db32c8ae..225efc7dfa 100644
--- a/hacking/aws_config/testing_policies/ecs-policy.json
+++ b/hacking/aws_config/testing_policies/container-policy.json
@@ -56,6 +56,20 @@
"Resource": [
"*"
]
+ },
+ {
+ "Effect": "Allow",
+ "Action": [
+ "eks:CreateCluster",
+ "eks:DeleteCluster",
+ "eks:DescribeCluster",
+ "eks:ListClusters"
+ ],
+ "Resource": [
+ "*"
+ ]
}
+
+
]
}