Add eks:UpdateClusterConfig permission

aws · Oct 17, 2023 · 9e1939d · 9e1939d
1 parent b4d4ea3
commit 9e1939d
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/.github/actions/e2e/create-cluster/action.yaml b/.github/actions/e2e/create-cluster/action.yaml
@@ -169,6 +169,8 @@ runs:
         --region ${{ inputs.region }} \
         --name ${{ inputs.cluster_name }} \
         --logging '{"clusterLogging":[{"types":["api","audit","authenticator","controllerManager","scheduler"],"enabled":true}]}'
+      
+      aws logs put-retention-policy --log-group-name "/aws/eks/${{ inputs.cluster_name }}/cluster" --retention-in-days 30
   - name: give KarpenterNodeRole permission to bootstrap
     shell: bash
     run: |

diff --git a/test/cloudformation/iam_cloudformation.yaml b/test/cloudformation/iam_cloudformation.yaml
@@ -144,6 +144,7 @@ Resources:
               - eks:CreateCluster
               - eks:CreateAddon
               - eks:CreateNodegroup
+              - eks:UpdateClusterConfig
               - eks:DeleteCluster
               - eks:ListFargateProfiles
               - eks:TagResource