Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(eks): improve documentation for updating a cluster (#30259)
### Reason for this change In our EKS documentation, we note that you need to add a temporary policy to the cluster admin role for successful replacement when renaming a cluster. The temporary policy we recommend adding to the cluster admin role is: ```ts cluster.adminRole.addToPolicy(new iam.PolicyStatement({ actions: [ 'eks:DeleteCluster', ], resources: [ Stack.of(this).formatArn({ service: 'eks', resource: 'cluster', resourceName: 'foo' }), ] })) ``` Changing the cluster name is an update that requires replacement. This will cause the old cluster to be automatically deleted by CloudFormation upon success. Since this policy doesn't have the `eks:DescribeCluster` action, the delete will fail: <img width="893" alt="image" src="https://github.com/aws/aws-cdk/assets/131073567/bb3cf3ff-3a6d-48f9-b84d-c6d0b8a495a7"> ### Description of changes Added `eks:DescribeCluster` to the actions of the recommended temporary policy. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
- Loading branch information