update

terraform-modules · Jan 20, 2023 · e85f190 · e85f190
1 parent 655fce9
commit e85f190
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 5 deletions.
diff --git a/examples/cluster-assume-role/README.md b/examples/cluster-assume-role/README.md
@@ -0,0 +1,14 @@
+# Enable access to assume the cluster admin role
+
+1. copy these files into the directory where the group/role is setup
+  * policies.eks.tf 
+  * variables.eks.tf
+  * settings.auto.tfvars
+1. add the cluster name(s) to the admin_cluster_list (without the eks- prefix)
+1. for IAM users, add the policy ARN to the list of polcies
+aws_iam_policy.list_assume_policy.arn
+1. for SAML roles, add the policy ARN to the list of polcies
+aws_iam_policy.list_assume_policy.arn
+1. you may need to add a POLICY line to tf-run.data before the ALL if it doesn't exist
+1. tf-run plan (starting at POLICY step)
+1. commit/PR
diff --git a/examples/cluster-assume-role/group.tf b/examples/cluster-assume-role/group.tf
diff --git a/examples/cluster-assume-role/policies.tf → examples/cluster-assume-role/policies.eks.tf b/examples/cluster-assume-role/policies.tf → examples/cluster-assume-role/policies.eks.tf
diff --git a/examples/cluster-assume-role/settings.auto.tfvars b/examples/cluster-assume-role/settings.auto.tfvars
@@ -1,3 +1 @@
-admin_cluster_list = [
-  "edl-sa1",
-]
+admin_cluster_list = []
diff --git a/examples/cluster-assume-role/variables.tf → ...ples/cluster-assume-role/variables.eks.tf b/examples/cluster-assume-role/variables.tf → ...ples/cluster-assume-role/variables.eks.tf