-
Notifications
You must be signed in to change notification settings - Fork 4.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow using IRSA for EBS CSI Driver #11747
Conversation
530c4d7
to
0bc53a1
Compare
Can we not remove permissions from the instance role when both the AWS driver and IRSA are enabled? I notice a bunch of permissions are using the legacy tags. Are these all for dealing with volumes previously created? I hope we're not relying on having legacy tags on new volumes. |
We are not relying on the legacy tags beyond these permissions and we can change these policies later when the in-tree plugin is no longer supported. |
We can also remove permissions from the master role, but I want to see some green e2es before I start removing things. But I do commit to removing as much of the master permissions as we can for the 1.22 release. |
0bc53a1
to
e7dd34a
Compare
e7dd34a
to
739a017
Compare
I remove the relevant permissions now. There are only volume-related permissions remaining that etcd-manager require to attach its own volumes. |
/retest |
/cc @johngmyers |
739a017
to
33a7de6
Compare
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: johngmyers The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/retest |
No description provided.