mirror of
https://github.com/jlengrand/engine.git
synced 2026-03-10 08:11:21 +00:00
35 lines
760 B
HCL
35 lines
760 B
HCL
#######
|
|
# IAM #
|
|
#######
|
|
|
|
resource "aws_iam_role" "eks_cluster" {
|
|
name = "qovery-eks-${var.kubernetes_cluster_id}"
|
|
|
|
tags = local.tags_eks
|
|
|
|
assume_role_policy = <<POLICY
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Principal": {
|
|
"Service": "eks.amazonaws.com"
|
|
},
|
|
"Action": "sts:AssumeRole"
|
|
}
|
|
]
|
|
}
|
|
POLICY
|
|
}
|
|
|
|
resource "aws_iam_role_policy_attachment" "eks_cluster_AmazonEKSClusterPolicy" {
|
|
policy_arn = "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"
|
|
role = aws_iam_role.eks_cluster.name
|
|
}
|
|
|
|
resource "aws_iam_role_policy_attachment" "eks_cluster_AmazonEKSServicePolicy" {
|
|
policy_arn = "arn:aws:iam::aws:policy/AmazonEKSServicePolicy"
|
|
role = aws_iam_role.eks_cluster.name
|
|
}
|