Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: Add missing TagResource permission needed for EFS CSI #1581

Merged
merged 2 commits into from
May 4, 2023
Merged

fix: Add missing TagResource permission needed for EFS CSI #1581

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
01a4af4
Add missing TagResource permission needed for EFS CSI
rrrkharse May 4, 2023
071ca5f
fix pre-commit errors
askulkarni2 May 4, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ADOPTERS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,6 @@ If you are using EKS Blueprints for Terraform please consider adding yourself as

| Organization | Description | Contacts | Link |
| --- | --- | --- | --- |
| PITS Global Data Recovery Services | PITS Global Data Recovery Services is a leading global recovery company based in the United States. With a team of highly skilled and experienced data recovery experts, we are dedicated to providing top-notch data recovery services to businesses and individuals across the country. Our team understands how critical data is and takes pride in recovering lost, corrupted, or deleted files quickly and effectively. Regardless of the data loss scenario, our team of experts has the tools and expertise to get your data back.| info@pitsdatarecovery.net | https://www.pitsdatarecovery.net/ |
| PITS Global Data Recovery Services | PITS Global Data Recovery Services is a leading global recovery company based in the United States. With a team of highly skilled and experienced data recovery experts, we are dedicated to providing top-notch data recovery services to businesses and individuals across the country. Our team understands how critical data is and takes pride in recovering lost, corrupted, or deleted files quickly and effectively. Regardless of the data loss scenario, our team of experts has the tools and expertise to get your data back.| info@pitsdatarecovery.net | https://www.pitsdatarecovery.net/ |
| AlgoDx AB | At AlgoDx, we are dedicated to developing and implementing clinically validated ML-based clinical decision support software that save lives and reduce costs in healthcare, primarily targeting intensive and critical care. We achieve this through the integration of our state-of-the-art AI precision medicine platform with health systems’ electronic medical records. | sebastian.olsson@algodx.com, info+engineering@algodx.com | https://www.algodx.com/ |
| Swyft Logistics | Swyft is an award-winning, tech-enabled last-mile e-Parcel delivery service provider, primarily operating in the fashion, electronics, and personal care industries. Swyft aspires to reinvent logistics in Pakistan and connecting people beyond possibilities. Our focus is on innovation, development of technologies and processes. | abdul.rauf@swyftlogistics.com, haider.aslam@swyftlogistics.com, osama.maruf@swyftlogistics.com, | https://www.swyftlogistics.com/ |
16 changes: 16 additions & 0 deletions modules/kubernetes-addons/aws-efs-csi-driver/data.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,22 @@ data "aws_iam_policy_document" "aws_efs_csi_driver" {
}
}

statement {
sid = "AllowTagResource"
effect = "Allow"
resources = [
"arn:${var.addon_context.aws_partition_id}:elasticfilesystem:${var.addon_context.aws_region_name}:${var.addon_context.aws_caller_identity_account_id}:file-system/*",
"arn:${var.addon_context.aws_partition_id}:elasticfilesystem:${var.addon_context.aws_region_name}:${var.addon_context.aws_caller_identity_account_id}:access-point/*"
]
actions = ["elasticfilesystem:TagResource"]

condition {
test = "StringLike"
variable = "aws:ResourceTag/efs.csi.aws.com/cluster"
values = ["true"]
}
}

statement {
actions = [
"elasticfilesystem:ClientRootAccess",
Expand Down