iammanager.keikoproj.io_iamroles-configmap.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: iamroles-v1alpha1-configmap
  namespace: dev
data:
  iam.policy.action.prefix.whitelist: "s3:,sts:,ec2:Describe,acm:Describe,acm:List,acm:Get,route53:Get,route53:List,route53:Create,route53:Delete,route53:Change,kms:Decrypt,kms:Encrypt,kms:ReEncrypt,kms:GenerateDataKey,kms:DescribeKey,dynamodb:,secretsmanager:GetSecretValue,es:,sqs:SendMessage,sqs:ReceiveMessage,sqs:DeleteMessage,SNS:Publish,sqs:GetQueueAttributes,sqs:GetQueueUrl"
  iam.policy.resource.blacklist: "kops"
  iam.policy.s3.restricted.resource: "*"
  aws.region: "us-west-2"
  aws.MasterRole: "masters.cluster.k8s.local"
  iam.managed.policies: "shared.cluster.k8s.local"