Merge pull request #9924 from hakman/additional-policies-shared-roles

Only add additional policies to kops managed IAMRoles
kubernetes · Sep 16, 2020 · 50e61d6 · 50e61d6
2 parents 8ee0816 + 07be801
commit 50e61d6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/model/iam.go b/pkg/model/iam.go
@@ -266,7 +266,7 @@ func (b *IAMModelBuilder) buildIAMTasks(role iam.Subject, iamName string, c *fi.
 		}
 
 		// Generate additional policies if needed, and attach to existing role
-		{
+		if !shared {
 			additionalPolicy := ""
 			if b.Cluster.Spec.AdditionalPolicies != nil {
 				additionalPolicies := *(b.Cluster.Spec.AdditionalPolicies)