Need this since we recently changed to dynamically detect regions to upload to. See https://github.com/coreos/coreos-assembler/commit/ab3cae5 --- files/aws/iam/policies/fcos-upload-amis.json | 1 + 1 file changed, 1 insertion(+)
diff --git a/files/aws/iam/policies/fcos-upload-amis.json b/files/aws/iam/policies/fcos-upload-amis.json index 03999c6b0..266074522 100644 --- a/files/aws/iam/policies/fcos-upload-amis.json +++ b/files/aws/iam/policies/fcos-upload-amis.json @@ -22,6 +22,7 @@ "ec2:DescribeImageAttribute", "ec2:DescribeVolumes", "ec2:CreateSnapshot", + "ec2:DescribeRegions", "ec2:DescribeConversionTasks" ], "Resource": "*"
LGTM +1
On Wed, Nov 27, 2019 at 9:19 AM Dusty Mabe dusty@dustymabe.com wrote:
Need this since we recently changed to dynamically detect regions to upload to. See https://github.com/coreos/coreos-assembler/commit/ab3cae5
files/aws/iam/policies/fcos-upload-amis.json | 1 + 1 file changed, 1 insertion(+)
diff --git a/files/aws/iam/policies/fcos-upload-amis.json b/files/aws/iam/policies/fcos-upload-amis.json index 03999c6b0..266074522 100644 --- a/files/aws/iam/policies/fcos-upload-amis.json +++ b/files/aws/iam/policies/fcos-upload-amis.json @@ -22,6 +22,7 @@ "ec2:DescribeImageAttribute", "ec2:DescribeVolumes", "ec2:CreateSnapshot",
"ec2:DescribeRegions", "ec2:DescribeConversionTasks" ], "Resource": "*"-- 2.20.1 _______________________________________________ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedorapro...
pushed, can you update the policy in AWS?
On 11/27/19 9:22 AM, Mohan Boddu wrote:
LGTM +1
On Wed, Nov 27, 2019 at 9:19 AM Dusty Mabe dusty@dustymabe.com wrote:
Need this since we recently changed to dynamically detect regions to upload to. See https://github.com/coreos/coreos-assembler/commit/ab3cae5
files/aws/iam/policies/fcos-upload-amis.json | 1 + 1 file changed, 1 insertion(+)
diff --git a/files/aws/iam/policies/fcos-upload-amis.json b/files/aws/iam/policies/fcos-upload-amis.json index 03999c6b0..266074522 100644 --- a/files/aws/iam/policies/fcos-upload-amis.json +++ b/files/aws/iam/policies/fcos-upload-amis.json @@ -22,6 +22,7 @@ "ec2:DescribeImageAttribute", "ec2:DescribeVolumes", "ec2:CreateSnapshot",
"ec2:DescribeRegions", "ec2:DescribeConversionTasks" ], "Resource": "*"-- 2.20.1 _______________________________________________ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedorapro...
infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedorapro...
On 11/30/19 3:21 PM, Kevin Fenzi wrote:
On Wed, Nov 27, 2019 at 09:26:09AM -0500, Dusty Mabe wrote:
pushed, can you update the policy in AWS?
Done.
Thanks Kevin! Can we look at getting Mohan the permissions to do this too?
Dusty
On Mon, Dec 02, 2019 at 04:07:53PM -0500, Dusty Mabe wrote:
On 11/30/19 3:21 PM, Kevin Fenzi wrote:
On Wed, Nov 27, 2019 at 09:26:09AM -0500, Dusty Mabe wrote:
pushed, can you update the policy in AWS?
Done.
Thanks Kevin! Can we look at getting Mohan the permissions to do this too?
We recently added Fabian Arrotin from the centos side, as soon as he is up to speed, he could process requests too.
I am not sure we want to add a horde of people, or if Mohan specifically has interest in this. For controlling the aws master account we require ack from at least 2 levels of managers.
But we do have multiple people and will process your requests as we can.
kevin
infrastructure@lists.fedoraproject.org
-
Dusty Mabe -
Kevin Fenzi -
Mohan Boddu