[terraform-aws] Update AWS LB Controller policy following API change (#…

…980)
interuss · Dec 21, 2023 · 3017786 · 3017786
1 parent b1792bb
commit 3017786
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/...infrastructure/dependencies/terraform-aws-kubernetes/AWSLoadBalancerControllerPolicy.json b/...infrastructure/dependencies/terraform-aws-kubernetes/AWSLoadBalancerControllerPolicy.json
@@ -196,6 +196,28 @@
         }
       }
     },
+    {
+      "Effect": "Allow",
+      "Action": [
+        "elasticloadbalancing:AddTags"
+      ],
+      "Resource": [
+        "arn:aws:elasticloadbalancing:*:*:targetgroup/*/*",
+        "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/*/*",
+        "arn:aws:elasticloadbalancing:*:*:loadbalancer/app/*/*"
+      ],
+      "Condition": {
+        "StringEquals": {
+          "elasticloadbalancing:CreateAction": [
+            "CreateTargetGroup",
+            "CreateLoadBalancer"
+          ]
+        },
+        "Null": {
+          "aws:RequestTag/elbv2.k8s.aws/cluster": "false"
+        }
+      }
+    },
     {
       "Effect": "Allow",
       "Action": [