Skip to content

Commit cadfe47

Browse files
fix: Reflect the changes in the ebs_csi driver (#326)
Co-authored-by: Bryant Biggs <[email protected]>
1 parent 6f860ff commit cadfe47

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

modules/iam-role-for-service-accounts-eks/policies.tf

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -225,6 +225,17 @@ data "aws_iam_policy_document" "ebs_csi" {
225225
}
226226
}
227227

228+
statement {
229+
actions = ["ec2:DeleteVolume"]
230+
resources = ["*"]
231+
232+
condition {
233+
test = "StringLike"
234+
variable = "ec2:ResourceTag/kubernetes.io/created-for/pvc/name"
235+
values = ["*"]
236+
}
237+
}
238+
228239
statement {
229240
actions = ["ec2:DeleteSnapshot"]
230241
resources = ["*"]

0 commit comments

Comments
 (0)