feat: Update IAM permissions for load balancer controller v2.12.0 (#33)

gp-davidhardy · web-flow · commit 36379bcb3b5b · 2025-03-12T16:13:40.000-05:00
diff --git a/aws_lb_controller.tf b/aws_lb_controller.tf
@@ -211,6 +211,7 @@ data "aws_iam_policy_document" "lb_controller" {
       "elasticloadbalancing:DeleteTargetGroup",
       "elasticloadbalancing:ModifyListenerAttributes",
       "elasticloadbalancing:ModifyCapacityReservation",
+      "elasticloadbalancing:ModifyIpPools"
     ]
     resources = ["*"]
 
@@ -262,6 +263,7 @@ data "aws_iam_policy_document" "lb_controller" {
       "elasticloadbalancing:AddListenerCertificates",
       "elasticloadbalancing:RemoveListenerCertificates",
       "elasticloadbalancing:ModifyRule",
+      "elasticloadbalancing:SetRulePriorities"
     ]
     resources = ["*"]
   }

Original file line number	Diff line number	Diff line change
`@@ -211,6 +211,7 @@ data "aws_iam_policy_document" "lb_controller" {`
`211`	`211`	`"elasticloadbalancing:DeleteTargetGroup",`
`212`	`212`	`"elasticloadbalancing:ModifyListenerAttributes",`
`213`	`213`	`"elasticloadbalancing:ModifyCapacityReservation",`
	`214`	`+ "elasticloadbalancing:ModifyIpPools"`
`214`	`215`	`]`
`215`	`216`	`resources = ["*"]`
`216`	`217`
`@@ -262,6 +263,7 @@ data "aws_iam_policy_document" "lb_controller" {`
`262`	`263`	`"elasticloadbalancing:AddListenerCertificates",`
`263`	`264`	`"elasticloadbalancing:RemoveListenerCertificates",`
`264`	`265`	`"elasticloadbalancing:ModifyRule",`
	`266`	`+ "elasticloadbalancing:SetRulePriorities"`
`265`	`267`	`]`
`266`	`268`	`resources = ["*"]`
`267`	`269`	`}`