fix: add roles for NLB support on EKS

fixes #133
eksctl-io · Jul 25, 2018 · a6fcd02 · a6fcd02
1 parent 4b913d9
commit a6fcd02
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 5 deletions.
diff --git a/pkg/eks/assets/1.10.3/2018-06-05/amazon-eks-service-role.yaml b/pkg/eks/assets/1.10.3/2018-06-05/amazon-eks-service-role.yaml
@@ -21,6 +21,21 @@ Resources:
         - arn:aws:iam::aws:policy/AmazonEKSServicePolicy
         - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy
 
+  NetworkLoadBalancerPolicyForAamazonEKS:
+    Type: AWS::IAM::Policy
+    Properties:
+      PolicyName: !Sub "${AWS::StackName}-NLB"
+      Roles: [!Ref AWSServiceRoleForAmazonEKS]
+      PolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+        - Effect: Allow
+          Resource: '*'
+          Action:
+          - elasticloadbalancing:*
+          - ec2:CreateSecurityGroup
+          - ec2:Describe*
+
 Outputs:
 
   RoleArn:

diff --git a/pkg/eks/cfn_templates.go b/pkg/eks/cfn_templates.go