-
Notifications
You must be signed in to change notification settings - Fork 4.7k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
35 changed files
with
5,815 additions
and
1 deletion.
There are no files selected for viewing
1 change: 1 addition & 0 deletions
1
...indnet/data/aws_cloudwatch_event_rule_minimal-ipv6.example.com-ASGLifecycle_event_pattern
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| {"source":["aws.autoscaling"],"detail-type":["EC2 Instance-terminate Lifecycle Action"]} |
1 change: 1 addition & 0 deletions
1
.../aws_cloudwatch_event_rule_minimal-ipv6.example.com-InstanceScheduledChange_event_pattern
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| {"source": ["aws.health"],"detail-type": ["AWS Health Event"],"detail": {"service": ["EC2"],"eventTypeCategory": ["scheduledChange"]}} |
1 change: 1 addition & 0 deletions
1
...data/aws_cloudwatch_event_rule_minimal-ipv6.example.com-InstanceStateChange_event_pattern
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| {"source": ["aws.ec2"],"detail-type": ["EC2 Instance State-change Notification"]} |
1 change: 1 addition & 0 deletions
1
...et/data/aws_cloudwatch_event_rule_minimal-ipv6.example.com-SpotInterruption_event_pattern
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| {"source": ["aws.ec2"],"detail-type": ["EC2 Spot Instance Interruption Warning"]} |
10 changes: 10 additions & 0 deletions
10
...te_cluster/minimal-ipv6-kindnet/data/aws_iam_role_masters.minimal-ipv6.example.com_policy
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| { | ||
| "Version": "2012-10-17", | ||
| "Statement": [ | ||
| { | ||
| "Effect": "Allow", | ||
| "Principal": { "Service": "ec2.amazonaws.com"}, | ||
| "Action": "sts:AssumeRole" | ||
| } | ||
| ] | ||
| } |
10 changes: 10 additions & 0 deletions
10
...date_cluster/minimal-ipv6-kindnet/data/aws_iam_role_nodes.minimal-ipv6.example.com_policy
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| { | ||
| "Version": "2012-10-17", | ||
| "Statement": [ | ||
| { | ||
| "Effect": "Allow", | ||
| "Principal": { "Service": "ec2.amazonaws.com"}, | ||
| "Action": "sts:AssumeRole" | ||
| } | ||
| ] | ||
| } |
279 changes: 279 additions & 0 deletions
279
...ter/minimal-ipv6-kindnet/data/aws_iam_role_policy_masters.minimal-ipv6.example.com_policy
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,279 @@ | ||
| { | ||
| "Statement": [ | ||
| { | ||
| "Action": "ec2:AttachVolume", | ||
| "Condition": { | ||
| "StringEquals": { | ||
| "aws:ResourceTag/KubernetesCluster": "minimal-ipv6.example.com", | ||
| "aws:ResourceTag/k8s.io/role/master": "1" | ||
| } | ||
| }, | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "*" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "s3:Get*" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": "arn:aws-test:s3:::placeholder-read-bucket/clusters.example.com/minimal-ipv6.example.com/*" | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "s3:DeleteObject", | ||
| "s3:DeleteObjectVersion", | ||
| "s3:GetObject", | ||
| "s3:PutObject" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": "arn:aws-test:s3:::placeholder-write-bucket/clusters.example.com/minimal-ipv6.example.com/backups/etcd/main/*" | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "s3:DeleteObject", | ||
| "s3:DeleteObjectVersion", | ||
| "s3:GetObject", | ||
| "s3:PutObject" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": "arn:aws-test:s3:::placeholder-write-bucket/clusters.example.com/minimal-ipv6.example.com/backups/etcd/events/*" | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "s3:GetBucketLocation", | ||
| "s3:GetEncryptionConfiguration", | ||
| "s3:ListBucket", | ||
| "s3:ListBucketVersions" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:s3:::placeholder-read-bucket" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "s3:GetBucketLocation", | ||
| "s3:GetEncryptionConfiguration", | ||
| "s3:ListBucket", | ||
| "s3:ListBucketVersions" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:s3:::placeholder-write-bucket" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "route53:ChangeResourceRecordSets", | ||
| "route53:GetHostedZone", | ||
| "route53:ListResourceRecordSets" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:route53:::hostedzone/Z1AFAKE1ZON3YO" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "route53:GetChange" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:route53:::change/*" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "route53:ListHostedZones", | ||
| "route53:ListTagsForResource" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "*" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": "ec2:CreateTags", | ||
| "Condition": { | ||
| "StringEquals": { | ||
| "aws:RequestTag/KubernetesCluster": "minimal-ipv6.example.com", | ||
| "ec2:CreateAction": [ | ||
| "CreateVolume", | ||
| "CreateSnapshot" | ||
| ] | ||
| } | ||
| }, | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:ec2:*:*:snapshot/*", | ||
| "arn:aws-test:ec2:*:*:volume/*" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "ec2:CreateTags", | ||
| "ec2:DeleteTags" | ||
| ], | ||
| "Condition": { | ||
| "Null": { | ||
| "aws:RequestTag/KubernetesCluster": "true" | ||
| }, | ||
| "StringEquals": { | ||
| "aws:ResourceTag/KubernetesCluster": "minimal-ipv6.example.com" | ||
| } | ||
| }, | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:ec2:*:*:snapshot/*", | ||
| "arn:aws-test:ec2:*:*:volume/*" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": "ec2:CreateTags", | ||
| "Condition": { | ||
| "StringEquals": { | ||
| "aws:RequestTag/KubernetesCluster": "minimal-ipv6.example.com", | ||
| "ec2:CreateAction": [ | ||
| "CreateSecurityGroup" | ||
| ] | ||
| } | ||
| }, | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:ec2:*:*:security-group/*" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "ec2:CreateTags", | ||
| "ec2:DeleteTags" | ||
| ], | ||
| "Condition": { | ||
| "Null": { | ||
| "aws:RequestTag/KubernetesCluster": "true" | ||
| }, | ||
| "StringEquals": { | ||
| "aws:ResourceTag/KubernetesCluster": "minimal-ipv6.example.com" | ||
| } | ||
| }, | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:ec2:*:*:security-group/*" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "autoscaling:DescribeAutoScalingGroups", | ||
| "autoscaling:DescribeAutoScalingInstances", | ||
| "autoscaling:DescribeLaunchConfigurations", | ||
| "autoscaling:DescribeScalingActivities", | ||
| "autoscaling:DescribeTags", | ||
| "ec2:AssignIpv6Addresses", | ||
| "ec2:DescribeAccountAttributes", | ||
| "ec2:DescribeAvailabilityZones", | ||
| "ec2:DescribeImages", | ||
| "ec2:DescribeInstanceTypes", | ||
| "ec2:DescribeInstances", | ||
| "ec2:DescribeLaunchTemplateVersions", | ||
| "ec2:DescribeNetworkInterfaces", | ||
| "ec2:DescribeRegions", | ||
| "ec2:DescribeRouteTables", | ||
| "ec2:DescribeSecurityGroups", | ||
| "ec2:DescribeSubnets", | ||
| "ec2:DescribeTags", | ||
| "ec2:DescribeVolumes", | ||
| "ec2:DescribeVolumesModifications", | ||
| "ec2:DescribeVpcs", | ||
| "ec2:GetInstanceTypesFromInstanceRequirements", | ||
| "ec2:ModifyInstanceAttribute", | ||
| "elasticloadbalancing:DescribeListeners", | ||
| "elasticloadbalancing:DescribeLoadBalancerAttributes", | ||
| "elasticloadbalancing:DescribeLoadBalancerPolicies", | ||
| "elasticloadbalancing:DescribeLoadBalancers", | ||
| "elasticloadbalancing:DescribeTargetGroups", | ||
| "elasticloadbalancing:DescribeTargetHealth", | ||
| "iam:CreateServiceLinkedRole", | ||
| "iam:GetServerCertificate", | ||
| "iam:ListServerCertificates", | ||
| "kms:CreateGrant", | ||
| "kms:Decrypt", | ||
| "kms:DescribeKey", | ||
| "kms:Encrypt", | ||
| "kms:GenerateDataKey*", | ||
| "kms:GenerateRandom", | ||
| "kms:ReEncrypt*", | ||
| "sqs:DeleteMessage", | ||
| "sqs:ReceiveMessage" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": "*" | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "autoscaling:CompleteLifecycleAction", | ||
| "autoscaling:SetDesiredCapacity", | ||
| "autoscaling:TerminateInstanceInAutoScalingGroup", | ||
| "ec2:AttachVolume", | ||
| "ec2:AuthorizeSecurityGroupIngress", | ||
| "ec2:DeleteSecurityGroup", | ||
| "ec2:DeleteVolume", | ||
| "ec2:DetachVolume", | ||
| "ec2:ModifyInstanceAttribute", | ||
| "ec2:ModifyVolume", | ||
| "ec2:RevokeSecurityGroupIngress", | ||
| "elasticloadbalancing:AddTags", | ||
| "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", | ||
| "elasticloadbalancing:AttachLoadBalancerToSubnets", | ||
| "elasticloadbalancing:ConfigureHealthCheck", | ||
| "elasticloadbalancing:CreateLoadBalancerListeners", | ||
| "elasticloadbalancing:CreateLoadBalancerPolicy", | ||
| "elasticloadbalancing:DeleteListener", | ||
| "elasticloadbalancing:DeleteLoadBalancer", | ||
| "elasticloadbalancing:DeleteLoadBalancerListeners", | ||
| "elasticloadbalancing:DeleteTargetGroup", | ||
| "elasticloadbalancing:DeregisterInstancesFromLoadBalancer", | ||
| "elasticloadbalancing:DeregisterTargets", | ||
| "elasticloadbalancing:DetachLoadBalancerFromSubnets", | ||
| "elasticloadbalancing:ModifyListener", | ||
| "elasticloadbalancing:ModifyLoadBalancerAttributes", | ||
| "elasticloadbalancing:ModifyTargetGroup", | ||
| "elasticloadbalancing:RegisterInstancesWithLoadBalancer", | ||
| "elasticloadbalancing:RegisterTargets", | ||
| "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer", | ||
| "elasticloadbalancing:SetLoadBalancerPoliciesOfListener" | ||
| ], | ||
| "Condition": { | ||
| "StringEquals": { | ||
| "aws:ResourceTag/KubernetesCluster": "minimal-ipv6.example.com" | ||
| } | ||
| }, | ||
| "Effect": "Allow", | ||
| "Resource": "*" | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "ec2:CreateSecurityGroup", | ||
| "ec2:CreateSnapshot", | ||
| "ec2:CreateVolume", | ||
| "elasticloadbalancing:CreateListener", | ||
| "elasticloadbalancing:CreateLoadBalancer", | ||
| "elasticloadbalancing:CreateTargetGroup" | ||
| ], | ||
| "Condition": { | ||
| "StringEquals": { | ||
| "aws:RequestTag/KubernetesCluster": "minimal-ipv6.example.com" | ||
| } | ||
| }, | ||
| "Effect": "Allow", | ||
| "Resource": "*" | ||
| }, | ||
| { | ||
| "Action": "ec2:CreateSecurityGroup", | ||
| "Effect": "Allow", | ||
| "Resource": "arn:aws-test:ec2:*:*:vpc/*" | ||
| } | ||
| ], | ||
| "Version": "2012-10-17" | ||
| } |
32 changes: 32 additions & 0 deletions
32
...uster/minimal-ipv6-kindnet/data/aws_iam_role_policy_nodes.minimal-ipv6.example.com_policy
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| { | ||
| "Statement": [ | ||
| { | ||
| "Action": [ | ||
| "s3:GetBucketLocation", | ||
| "s3:GetEncryptionConfiguration", | ||
| "s3:ListBucket", | ||
| "s3:ListBucketVersions" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": [ | ||
| "arn:aws-test:s3:::placeholder-read-bucket" | ||
| ] | ||
| }, | ||
| { | ||
| "Action": [ | ||
| "autoscaling:DescribeAutoScalingInstances", | ||
| "ec2:AssignIpv6Addresses", | ||
| "ec2:DescribeInstanceTypes", | ||
| "ec2:DescribeInstances", | ||
| "ec2:DescribeRegions", | ||
| "ec2:ModifyInstanceAttribute", | ||
| "iam:GetServerCertificate", | ||
| "iam:ListServerCertificates", | ||
| "kms:GenerateRandom" | ||
| ], | ||
| "Effect": "Allow", | ||
| "Resource": "*" | ||
| } | ||
| ], | ||
| "Version": "2012-10-17" | ||
| } |
1 change: 1 addition & 0 deletions
1
..._key_pair_kubernetes.minimal-ipv6.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCtWu40XQo8dczLsCq0OWV+hxm9uV3WxeH9Kgh4sMzQxNtoU1pvW0XdjpkBesRKGoolfWeCLXWxpyQb1IaiMkKoz7MdhQ/6UKjMjP66aFWWp3pwD0uj0HuJ7tq4gKHKRYGTaZIRWpzUiANBrjugVgA+Sd7E/mYwc/DMXkIyRZbvhQ== |
Oops, something went wrong.