Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Apply the Recommended Load balancer controller policy to v4 #1814

Merged
merged 3 commits into from
Oct 31, 2023

Conversation

allamand
Copy link
Contributor

Description

Motivation and Context

  • Resolves Issue where the policy for load balancer controller is exceeding the 6144 character limit
│ Error: updating IAM Policy (arn:aws-cn:iam::123456789:policy/cn-northwest-1-cluster-lb-irsa): LimitExceeded: Cannot exceed quota for PolicySize: 6144
│       status code: 409, request id: 160721f9-bf36-4e4f-a085-788b3e8dc5ab
│ 
│   with module.eks_cluster.module.kubernetes_addons.module.aws_load_balancer_controller[0].aws_iam_policy.aws_load_balancer_controller,
│   on .terraform/modules/eks_cluster.kubernetes_addons/modules/kubernetes-addons/aws-load-balancer-controller/main.tf line 10, in resource "aws_iam_policy" "aws_load_balancer_controller":
│   10: resource "aws_iam_policy" "aws_load_balancer_controller" {

apply the recommended policy : https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.6.1/docs/install/iam_policy.json

How was this change tested?

  • Yes, I have tested the PR using my local account setup (Provide any test evidence report under Additional Notes)
  • Yes, I have updated the docs for this feature
  • Yes, I ran pre-commit run -a with this PR

Additional Notes

@allamand allamand requested a review from a team as a code owner October 31, 2023 14:56
@allamand allamand merged commit f0a7fde into fix_v4_chine Oct 31, 2023
1 check failed
@allamand allamand deleted the fix_v4_chine_lbc_policy branch October 31, 2023 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant