Skip to content

Commit 1de1afe

Browse files
vermutDonatien26
authored andcommitted
fix: use less permissive validation role
1 parent 447bf3a commit 1de1afe

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# s3-operator
1+
listbuckets# s3-operator
22

33
This Operator SDK based tool aims at managing S3 related resources (buckets, policies, ...) using a Kubernetes-centric approach. You can set `Bucket` or `Policy` custom resources, and let the operator create or update the corresponding bucket/policy on its configured S3 instance.
44

@@ -229,7 +229,7 @@ spec:
229229
# Content of the policy, as a multiline string
230230
# This should be IAM compliant JSON - follow the guidelines of the actual
231231
# S3 provider you're using, as sometimes only a subset is available.
232-
The first Statement (Allow ListBucket) should be applied to every user,
232+
The first Statement (Allow ListAllMyBuckets) should be applied to every user,
233233
# as s3-operator uses this call to verify that credentials are valid when
234234
# reconciling an existing user.
235235
policyContent: >-
@@ -239,7 +239,7 @@ spec:
239239
{
240240
"Effect": "Allow",
241241
"Action": [
242-
"s3:ListBucket"
242+
"s3:ListAllMyBuckets"
243243
],
244244
"Resource": [
245245
"arn:aws:s3:::*"

0 commit comments

Comments
 (0)