Merge pull request #738 from hendryanw/bugfix/awsloadbalancercontroll…

…eraddonpolicy Update AWS Load Balancer Controller Addon IAM Policy to fix permission issue during ALB ingress creation
aws-quickstart · Jun 26, 2023 · 1121f52 · 1121f52
2 parents 7879075 + 1232351
commit 1121f52
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/lib/addons/aws-loadbalancer-controller/iam-policy.ts b/lib/addons/aws-loadbalancer-controller/iam-policy.ts
@@ -195,6 +195,28 @@ export const AwsLoadbalancerControllerIamPolicy = (partition: string) => {
                     }
                 }
             },
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "elasticloadbalancing:AddTags"
+                ],
+                "Resource": [
+                    `arn:${partition}:elasticloadbalancing:*:*:targetgroup/*/*`,
+                    `arn:${partition}:elasticloadbalancing:*:*:loadbalancer/net/*/*`,
+                    `arn:${partition}:elasticloadbalancing:*:*:loadbalancer/app/*/*`
+                ],
+                "Condition": {
+                    "StringEquals": {
+                        "elasticloadbalancing:CreateAction": [
+                            "CreateTargetGroup",
+                            "CreateLoadBalancer"
+                        ]
+                    },
+                    "Null": {
+                        "aws:RequestTag/elbv2.k8s.aws/cluster": "false"
+                    }
+                }
+            },
             {
                 "Effect": "Allow",
                 "Action": [