public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 04:28:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update _index.md

Browse Source 
Quick deploy roles for AWS IAM
This commit is contained in:
Negash
2019-11-25 23:55:03 +03:00
committed by GitHub
parent 23b52f53d3
commit 057e022e32
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rke/latest/en/config-options/cloud-providers/aws/_index.md
+11 -2
View File
@@ -12,7 +12,7 @@ cloud_provider:
## IAM Requirements
The nodes used in RKE that will be running the AWS cloud provider must have at least the following IAM policy.
The nodes used in RKE that will be running the AWS cloud provider must have at least the following IAM policy (`rancher-role.json`).
```json
{
@@ -22,7 +22,7 @@ The nodes used in RKE that will be running the AWS cloud provider must have at l
}
```
In order to use Elastic Load Balancers (ELBs) and EBS with Kubernetes, the node(s) will need to have the an IAM role with appropriate access.
In order to use Elastic Load Balancers (ELBs) and EBS with Kubernetes, the node(s) will need to have the an IAM role with appropriate access (`rancher-policy.json`).
## Example Policy for IAM Role:
@@ -54,6 +54,15 @@ In order to use Elastic Load Balancers (ELBs) and EBS with Kubernetes, the node(
}
```
Deploy files to AWS IAM:
```bash
$ aws iam create-instance-profile --instance-profile-name rancher-node
$ aws iam create-role --role-name rancher-node --assume-role-policy-document file://rancher-role.json
$ aws iam put-role-policy --role-name rancher-node --policy-name rancher-policy --policy-document file://rancher-policy.json
$ aws iam add-role-to-instance-profile --instance-profile rancher-node --role-name rancher-node
```
## Tagging Amazon Resources
Any resources used in a Kubernetes cluster with the Amazon cloud provider must be tagged with a cluster ID.