Skip to content

Commit b1898a2

Browse files
authored
feat: Update AWS Load Balancer controller policy to match v2.13 of the upstream project (#36)
1 parent e3bc6c9 commit b1898a2

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

aws_lb_controller.tf

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,8 @@ data "aws_iam_policy_document" "lb_controller" {
3737
"ec2:GetCoipPoolUsage",
3838
"ec2:DescribeCoipPools",
3939
"ec2:GetSecurityGroupsForVpc",
40+
"ec2:DescribeIpamPools",
41+
"ec2:DescribeRouteTables",
4042
"elasticloadbalancing:DescribeLoadBalancers",
4143
"elasticloadbalancing:DescribeLoadBalancerAttributes",
4244
"elasticloadbalancing:DescribeListeners",
@@ -81,6 +83,12 @@ data "aws_iam_policy_document" "lb_controller" {
8183
actions = [
8284
"ec2:AuthorizeSecurityGroupIngress",
8385
"ec2:RevokeSecurityGroupIngress",
86+
]
87+
resources = ["*"]
88+
}
89+
90+
statement {
91+
actions = [
8492
"ec2:CreateSecurityGroup",
8593
]
8694
resources = ["*"]

0 commit comments

Comments
 (0)