(eksconfig): update valid ec2 service principals

aws · Nov 6, 2020 · 1191e27 · 1191e27
1 parent 6f195f4
commit 1191e27
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/eksconfig/add-on-node-groups.go b/eksconfig/add-on-node-groups.go
@@ -208,10 +208,13 @@ func (cfg *Config) validateAddOnNodeGroups() error {
 				})
 			*/
 			found := false
+			validSps := []string{"ec2.amazonaws.com", "ec2.amazonaws.com.cn", "ec2.c2s.ic.gov", "ec2.sc2s.sgov.gov"}
 			for _, pv := range cfg.AddOnNodeGroups.RoleServicePrincipals {
-				if pv == "ec2.amazonaws.com" || pv == "ec2.amazonaws.com.cn" {
-					found = true
-					break
+				for _, vsp := range validSps {
+					if pv == vsp {
+						found = true
+						break
+					}
 				}
 			}
 			if !found {