Skip to content

Instantly share code, notes, and snippets.

@krx252525
Created July 31, 2017 14:46
Show Gist options
  • Save krx252525/2ab513557143a21a92c6b634417369de to your computer and use it in GitHub Desktop.
Save krx252525/2ab513557143a21a92c6b634417369de to your computer and use it in GitHub Desktop.
Terraform Apply
~ module.hoolihan-k8s.k8s.aws_iam_role_policy.kube_master_iam_role_policy
policy: "{\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": \"ec2:Describe*\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"autoscaling:Describe*\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"ec2:*\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"elasticloadbalancing:*\",\n \"Resource\": \"*\"\n },\n {\n \"Action\": \"ec2:AttachVolume\",\n \"Effect\": \"Allow\",\n \"Resource\": \"*\"\n },\n {\n \"Action\": \"ec2:DetachVolume\",\n \"Effect\": \"Allow\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"kms:Decrypt\",\n \"Resource\": \"arn:aws:kms:us-east-1:533239223288:key/b0804248-8c12-414e-a064-0a3b9e416f11\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\"s3:ListBucket\"],\n \"Resource\": [\"arn:aws:s3:::hoolihan-prodk8s00-ue1-k8s-assets\"],\n \"Condition\": {\n \"StringLike\": {\n \"s3:prefix\": [\n \"master/*\"\n ]\n }\n }\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\"s3:GetObject\", \"s3:ListObjects\"],\n \"Resource\": [\"arn:aws:s3:::hoolihan-prodk8s00-ue1-k8s-assets/master/*\"]\n }\n ]\n}\n"
=>
"{\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": \"ec2:Describe*\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"autoscaling:Describe*\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"ec2:*\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"elasticloadbalancing:*\",\n \"Resource\": \"*\"\n },\n {\n \"Action\": \"ec2:AttachVolume\",\n \"Effect\": \"Allow\",\n \"Resource\": \"*\"\n },\n {\n \"Action\": \"ec2:DetachVolume\",\n \"Effect\": \"Allow\",\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"kms:Decrypt\",\n \"Resource\": \"${var.aws_kms_key_arn}\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\"s3:ListBucket\"],\n \"Resource\": [\"${aws_s3_bucket.k8s_assets.arn}\"],\n \"Condition\": {\n \"StringLike\": {\n \"s3:prefix\": [\n \"${var.k8s_assets_master_s3_prefix}/*\"\n ]\n }\n }\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\"s3:GetObject\", \"s3:ListObjects\"],\n \"Resource\": [\"${aws_s3_bucket.k8s_assets.arn}/${var.k8s_assets_master_s3_prefix}/*\"]\n }\n ]\n}\n"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment