Allow nodes to write CloudWatch metrics

errordeveloper · errordeveloper · commit 6d13a194b7e5 · 2018-11-01T08:41:41.000Z
This is primarily in order to facilitate exporting CNI metrics (ref #278)
diff --git a/pkg/cfn/builder/iam.go b/pkg/cfn/builder/iam.go
@@ -72,6 +72,9 @@ func (c *ClusterResourceSet) addResourcesForIAM() {
 		"ec2:CreateSecurityGroup",
 		"ec2:Describe*",
 	})
+	c.rs.attachAllowPolicy("PolicyCloudWatchMetrics", refSR, "*", []string{
+		"cloudwatch:PutMetricData",
+	})
 }
 
 // WithIAM states, if IAM roles will be created or not

Original file line number	Diff line number	Diff line change
`@@ -72,6 +72,9 @@ func (c *ClusterResourceSet) addResourcesForIAM() {`
`72`	`72`	`"ec2:CreateSecurityGroup",`
`73`	`73`	`"ec2:Describe*",`
`74`	`74`	`})`
	`75`	`+ c.rs.attachAllowPolicy("PolicyCloudWatchMetrics", refSR, "*", []string{`
	`76`	`+ "cloudwatch:PutMetricData",`
	`77`	`+ })`
`75`	`78`	`}`
`76`	`79`
`77`	`80`	`// WithIAM states, if IAM roles will be created or not`