terraform-aws-modules / terraform-aws-iam

Terraform module to create AWS IAM resources 🇺🇦
https://registry.terraform.io/modules/terraform-aws-modules/iam/aws
Apache License 2.0
779 stars 985 forks source link

aws-load-balancer-controller policy update #489

Closed lakal-malimage closed 3 months ago

lakal-malimage commented 3 months ago

Description

The current policy created by the IRSA doesn't allow AWS LB controller to deploy an ALB. AWS EKS Cluster with 1.29 -application load balancer fails with "error":"AccessDenied: User: arn:aws:sts::XXXXXXX:assumed-role/aws-load-balancer-controller/XXXXXX is not authorized to perform: elasticloadbalancing:AddTags

Related links - https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/tag/v2.4.7

lakal-malimage commented 3 months ago

New policy - https://github.com/kubernetes-sigs/aws-load-balancer-controller/blob/v2.8.0/docs/install/iam_policy.json

lakal-malimage commented 3 months ago

The problem was that my TF was referring to a older version of this module.

github-actions[bot] commented 2 months ago

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.