Update alb controller iam policy

oxheadalpha · Nov 22, 2023 · 20711ec · 20711ec
1 parent 627286a
commit 20711ec
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/aws/components/AlbIngressController.ts b/aws/components/AlbIngressController.ts
@@ -325,6 +325,26 @@ export default class AlbIngressController extends pulumi.ComponentResource {
                 },
               },
             },
+            {
+              Effect: "Allow",
+              Action: ["elasticloadbalancing:AddTags"],
+              Resource: [
+                "arn:aws:elasticloadbalancing:*:*:targetgroup/*/*",
+                "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/*/*",
+                "arn:aws:elasticloadbalancing:*:*:loadbalancer/app/*/*",
+              ],
+              Condition: {
+                StringEquals: {
+                  "elasticloadbalancing:CreateAction": [
+                    "CreateTargetGroup",
+                    "CreateLoadBalancer",
+                  ],
+                },
+                Null: {
+                  "aws:RequestTag/elbv2.k8s.aws/cluster": "false",
+                },
+              },
+            },
             {
               Effect: "Allow",
               Action: [