Skip to content

Commit

Permalink
Add System Manager permissions to the worker nodes (#1353)
Browse files Browse the repository at this point in the history
* Add System Manager permissions to the worker nodes

* Commit changes made by code formatters

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
  • Loading branch information
1 parent 0b5973d commit c3b021c
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions terraform/aws-accounts/cloud-platform-aws/vpc/eks/cluster.tf
Original file line number Diff line number Diff line change
Expand Up @@ -122,6 +122,9 @@ module "eks" {
monitoring_ng = local.monitoring_ng
}

# add System Manager permissions to the worker nodes. This will enable access to worker nodes using session manager
workers_additional_policies = ["arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"]

# Out of the box you can't specify groups to map, just users. Some people did some workarounds
# we can explore later: https://ygrene.tech/mapping-iam-groups-to-eks-user-access-66fd745a6b77
map_users = [
Expand Down

0 comments on commit c3b021c

Please sign in to comment.