Merge pull request kubernetes#5416 from appvia/aws-ebs-allow-resize

k8s-ci-robot · web-flow · commit 617ce047e6ae · 2018-07-06T08:33:18.000-07:00
Add IAM ec2:ModifyVolume permission to allow EBS volume resize
diff --git a/pkg/model/iam/iam_builder.go b/pkg/model/iam/iam_builder.go
@@ -635,6 +635,7 @@ func addMasterEC2Policies(p *Policy, resource stringorslice.StringOrSlice, legac
 					"ec2:CreateTags",              // aws.go, tag.go
 					"ec2:CreateVolume",            // aws.go
 					"ec2:ModifyInstanceAttribute", // aws.go
+					"ec2:ModifyVolume",            // aws.go
 				}),
 				Resource: resource,
 			},
diff --git a/pkg/model/iam/tests/iam_builder_master_strict.json b/pkg/model/iam/tests/iam_builder_master_strict.json
@@ -21,7 +21,8 @@
         "ec2:CreateSecurityGroup",
         "ec2:CreateTags",
         "ec2:CreateVolume",
-        "ec2:ModifyInstanceAttribute"
+        "ec2:ModifyInstanceAttribute",
+        "ec2:ModifyVolume"
       ],
       "Resource": [
         "*"
diff --git a/pkg/model/iam/tests/iam_builder_master_strict_ecr.json b/pkg/model/iam/tests/iam_builder_master_strict_ecr.json
@@ -21,7 +21,8 @@
         "ec2:CreateSecurityGroup",
         "ec2:CreateTags",
         "ec2:CreateVolume",
-        "ec2:ModifyInstanceAttribute"
+        "ec2:ModifyInstanceAttribute",
+        "ec2:ModifyVolume"
       ],
       "Resource": [
         "*"
