Skip to content

Commit 9f6dd25

Browse files
committed
add missing policy to list tags
fix: quotes should not be added to the arg Signed-off-by: Sandor Szücs <[email protected]>
1 parent 3d450e9 commit 9f6dd25

File tree

2 files changed

+5
-2
lines changed

2 files changed

+5
-2
lines changed

cluster/cluster.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1141,6 +1141,9 @@ Resources:
11411141
- Action: 'acm:DescribeCertificate'
11421142
Effect: Allow
11431143
Resource: '*'
1144+
- Action: 'acm:ListTagsForCertificate'
1145+
Effect: Allow
1146+
Resource: '*'
11441147
- Action: 'autoscaling:DescribeAutoScalingGroups'
11451148
Effect: Allow
11461149
Resource: '*'
@@ -1224,7 +1227,7 @@ Resources:
12241227
RoleName: "{{.Cluster.LocalID}}-app-ingr-ctrl"
12251228
Type: 'AWS::IAM::Role'
12261229
{{ if eq .Cluster.ConfigItems.skipper_open_policy_agent_enabled "true" }}
1227-
# Note: this is not strictly specific to Open Policy Agent and can be extend
1230+
# Note: this is not strictly specific to Open Policy Agent and can be extend
12281231
# if Skipper Ingress needs to access other AWS resources
12291232
SkipperIngressIAMRole:
12301233
Properties:

cluster/manifests/ingress-controller/deployment.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ spec:
5757
# {{ end }}
5858
- --cert-polling-interval={{ .Cluster.ConfigItems.kube_aws_ingress_controller_cert_polling_interval }}
5959
# {{ if .Cluster.ConfigItems.kube_aws_ingress_controller_cert_filter_tag }}
60-
- --cert-filter-tag="{{ .Cluster.ConfigItems.kube_aws_ingress_controller_cert_filter_tag }}"
60+
- --cert-filter-tag={{ .Cluster.ConfigItems.kube_aws_ingress_controller_cert_filter_tag }}
6161
# {{ end }}
6262
env:
6363
- name: CUSTOM_FILTERS

0 commit comments

Comments
 (0)