chore(integration): modify IAM policy for aws-load-balancer-controller

Add support for capacity unit reservation for load balancers kubernetes-sigs/aws-load-balancer-controller#3950
shihtiy-tw · Dec 10, 2024 · d19df3e · d19df3e
1 parent a9615c0
commit d19df3e
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/labs/integrations/aws-load-balancer-controller/policy.json b/labs/integrations/aws-load-balancer-controller/policy.json
@@ -29,6 +29,7 @@
         "ec2:DescribeTags",
         "ec2:GetCoipPoolUsage",
         "ec2:DescribeCoipPools",
+        "ec2:GetSecurityGroupsForVpc",
         "elasticloadbalancing:DescribeLoadBalancers",
         "elasticloadbalancing:DescribeLoadBalancerAttributes",
         "elasticloadbalancing:DescribeListeners",
@@ -39,7 +40,9 @@
         "elasticloadbalancing:DescribeTargetGroupAttributes",
         "elasticloadbalancing:DescribeTargetHealth",
         "elasticloadbalancing:DescribeTags",
-        "elasticloadbalancing:DescribeTrustStores"
+        "elasticloadbalancing:DescribeTrustStores",
+        "elasticloadbalancing:DescribeListenerAttributes",
+        "elasticloadbalancing:DescribeCapacityReservation"
       ],
       "Resource": "*"
     },
@@ -188,7 +191,9 @@
         "elasticloadbalancing:DeleteLoadBalancer",
         "elasticloadbalancing:ModifyTargetGroup",
         "elasticloadbalancing:ModifyTargetGroupAttributes",
-        "elasticloadbalancing:DeleteTargetGroup"
+        "elasticloadbalancing:DeleteTargetGroup",
+        "elasticloadbalancing:ModifyListenerAttributes",
+        "elasticloadbalancing:ModifyCapacityReservation"
       ],
       "Resource": "*",
       "Condition": {