Merge pull request #3492 from AmitSahastra/patch-1

k8s-ci-robot · web-flow · commit e9dcf1f885d5 · 2022-06-01T09:07:02.000-07:00
Add ReplaceRoute in ControllersPolicy
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/cluster_api_controller.go b/cmd/clusterawsadm/cloudformation/bootstrap/cluster_api_controller.go
@@ -97,6 +97,7 @@ func (t Template) ControllersPolicy() *iamv1.PolicyDocument {
 				"ec2:DeleteInternetGateway",
 				"ec2:DeleteNatGateway",
 				"ec2:DeleteRouteTable",
+				"ec2:ReplaceRoute",
 				"ec2:DeleteSecurityGroup",
 				"ec2:DeleteSubnet",
 				"ec2:DeleteTags",
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/customsuffix.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/customsuffix.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/default.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/default.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_all_secret_backends.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_all_secret_backends.yaml
@@ -155,6 +155,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_bootstrap_user.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_bootstrap_user.yaml
@@ -154,6 +154,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_custom_bootstrap_user.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_custom_bootstrap_user.yaml
@@ -154,6 +154,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_different_instance_profiles.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_different_instance_profiles.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_console.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_console.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_default_roles.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_default_roles.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_disable.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_disable.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_kms_prefix.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_kms_prefix.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_extra_statements.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_extra_statements.yaml
@@ -154,6 +154,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_s3_bucket.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_s3_bucket.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_ssm_secret_backend.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_ssm_secret_backend.yaml
@@ -149,6 +149,7 @@ Resources:
           - ec2:DeleteInternetGateway
           - ec2:DeleteNatGateway
           - ec2:DeleteRouteTable
+          - ec2:ReplaceRoute
           - ec2:DeleteSecurityGroup
           - ec2:DeleteSubnet
           - ec2:DeleteTags
