fix(efs): add necessary permissions (#233)

SizZiKe · web-flow · commit 46da6e99f3a2 · 2022-04-19T15:15:35.000+02:00
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -317,8 +317,10 @@ data "aws_iam_policy_document" "efs_csi" {
 
   statement {
     actions = [
+      "ec2:DescribeAvailabilityZones",
       "elasticfilesystem:DescribeAccessPoints",
       "elasticfilesystem:DescribeFileSystems",
+      "elasticfilesystem:DescribeMountTargets",
     ]
 
     resources = ["*"]

Original file line number	Diff line number	Diff line change
`@@ -317,8 +317,10 @@ data "aws_iam_policy_document" "efs_csi" {`
`317`	`317`
`318`	`318`	`statement {`
`319`	`319`	`actions = [`
	`320`	`+ "ec2:DescribeAvailabilityZones",`
`320`	`321`	`"elasticfilesystem:DescribeAccessPoints",`
`321`	`322`	`"elasticfilesystem:DescribeFileSystems",`
	`323`	`+ "elasticfilesystem:DescribeMountTargets",`
`322`	`324`	`]`
`323`	`325`
`324`	`326`	`resources = ["*"]`