public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-27 13:38:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'rancher:main' into main

Browse Source
This commit is contained in:
mschroeder-fzj
2026-01-26 07:03:54 +01:00
committed by GitHub
parent 3d9908ed90 d870a1a12a
commit 385a493e52
12 changed files with 510 additions and 486 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+2
View File
@@ -54,6 +54,7 @@ IAM Policy for nodes with the `controlplane` role:
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeRouteTables", "ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups", "ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets", "ec2:DescribeSubnets",
@@ -123,6 +124,7 @@ IAM policy for nodes with the `etcd` or `worker` role:
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ecr:GetAuthorizationToken", "ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability", "ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer", "ecr:GetDownloadUrlForLayer",
i18n/zh/docusaurus-plugin-content-docs/current/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+83 -81
View File
@@ -36,71 +36,72 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeLaunchConfigurations", "autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeRouteTables", "ec2:DescribeAvailabilityZones",
"ec2:DescribeSecurityGroups", "ec2:DescribeRouteTables",
"ec2:DescribeSubnets", "ec2:DescribeSecurityGroups",
"ec2:DescribeVolumes", "ec2:DescribeSubnets",
"ec2:CreateSecurityGroup", "ec2:DescribeVolumes",
"ec2:CreateTags", "ec2:CreateSecurityGroup",
"ec2:CreateVolume", "ec2:CreateTags",
"ec2:ModifyInstanceAttribute", "ec2:CreateVolume",
"ec2:ModifyVolume", "ec2:ModifyInstanceAttribute",
"ec2:AttachVolume", "ec2:ModifyVolume",
"ec2:AuthorizeSecurityGroupIngress", "ec2:AttachVolume",
"ec2:CreateRoute", "ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteRoute", "ec2:CreateRoute",
"ec2:DeleteSecurityGroup", "ec2:DeleteRoute",
"ec2:DeleteVolume", "ec2:DeleteSecurityGroup",
"ec2:DetachVolume", "ec2:DeleteVolume",
"ec2:RevokeSecurityGroupIngress", "ec2:DetachVolume",
"ec2:DescribeVpcs", "ec2:RevokeSecurityGroupIngress",
"elasticloadbalancing:AddTags", "ec2:DescribeVpcs",
"elasticloadbalancing:AttachLoadBalancerToSubnets", "elasticloadbalancing:AddTags",
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", "elasticloadbalancing:AttachLoadBalancerToSubnets",
"elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerPolicy", "elasticloadbalancing:CreateLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerListeners", "elasticloadbalancing:CreateLoadBalancerPolicy",
"elasticloadbalancing:ConfigureHealthCheck", "elasticloadbalancing:CreateLoadBalancerListeners",
"elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:ConfigureHealthCheck",
"elasticloadbalancing:DeleteLoadBalancerListeners", "elasticloadbalancing:DeleteLoadBalancer",
"elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DeleteLoadBalancerListeners",
"elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DetachLoadBalancerFromSubnets", "elasticloadbalancing:DescribeLoadBalancerAttributes",
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer", "elasticloadbalancing:DetachLoadBalancerFromSubnets",
"elasticloadbalancing:ModifyLoadBalancerAttributes", "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
"elasticloadbalancing:RegisterInstancesWithLoadBalancer", "elasticloadbalancing:ModifyLoadBalancerAttributes",
"elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer", "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
"elasticloadbalancing:AddTags", "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
"elasticloadbalancing:CreateListener", "elasticloadbalancing:AddTags",
"elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener",
"elasticloadbalancing:DeleteListener", "elasticloadbalancing:CreateTargetGroup",
"elasticloadbalancing:DeleteTargetGroup", "elasticloadbalancing:DeleteListener",
"elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DeleteTargetGroup",
"elasticloadbalancing:DescribeLoadBalancerPolicies", "elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeLoadBalancerPolicies",
"elasticloadbalancing:DescribeTargetHealth", "elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:ModifyListener", "elasticloadbalancing:DescribeTargetHealth",
"elasticloadbalancing:ModifyTargetGroup", "elasticloadbalancing:ModifyListener",
"elasticloadbalancing:RegisterTargets", "elasticloadbalancing:ModifyTargetGroup",
"elasticloadbalancing:SetLoadBalancerPoliciesOfListener", "elasticloadbalancing:RegisterTargets",
"iam:CreateServiceLinkedRole", "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
"kms:DescribeKey" "iam:CreateServiceLinkedRole",
], "kms:DescribeKey"
"Resource": [ ],
"*" "Resource": [
] "*"
} ]
] }
]
} }
``` ```
@@ -108,24 +109,25 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ecr:GetAuthorizationToken", "ec2:DescribeAvailabilityZones",
"ecr:BatchCheckLayerAvailability", "ecr:GetAuthorizationToken",
"ecr:GetDownloadUrlForLayer", "ecr:BatchCheckLayerAvailability",
"ecr:GetRepositoryPolicy", "ecr:GetDownloadUrlForLayer",
"ecr:DescribeRepositories", "ecr:GetRepositoryPolicy",
"ecr:ListImages", "ecr:DescribeRepositories",
"ecr:BatchGetImage" "ecr:ListImages",
], "ecr:BatchGetImage"
"Resource": "*" ],
"Resource": "*"
} }
] ]
} }
``` ```
i18n/zh/docusaurus-plugin-content-docs/version-2.10/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+83 -81
View File
@@ -36,71 +36,72 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeLaunchConfigurations", "autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeRouteTables", "ec2:DescribeAvailabilityZones",
"ec2:DescribeSecurityGroups", "ec2:DescribeRouteTables",
"ec2:DescribeSubnets", "ec2:DescribeSecurityGroups",
"ec2:DescribeVolumes", "ec2:DescribeSubnets",
"ec2:CreateSecurityGroup", "ec2:DescribeVolumes",
"ec2:CreateTags", "ec2:CreateSecurityGroup",
"ec2:CreateVolume", "ec2:CreateTags",
"ec2:ModifyInstanceAttribute", "ec2:CreateVolume",
"ec2:ModifyVolume", "ec2:ModifyInstanceAttribute",
"ec2:AttachVolume", "ec2:ModifyVolume",
"ec2:AuthorizeSecurityGroupIngress", "ec2:AttachVolume",
"ec2:CreateRoute", "ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteRoute", "ec2:CreateRoute",
"ec2:DeleteSecurityGroup", "ec2:DeleteRoute",
"ec2:DeleteVolume", "ec2:DeleteSecurityGroup",
"ec2:DetachVolume", "ec2:DeleteVolume",
"ec2:RevokeSecurityGroupIngress", "ec2:DetachVolume",
"ec2:DescribeVpcs", "ec2:RevokeSecurityGroupIngress",
"elasticloadbalancing:AddTags", "ec2:DescribeVpcs",
"elasticloadbalancing:AttachLoadBalancerToSubnets", "elasticloadbalancing:AddTags",
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", "elasticloadbalancing:AttachLoadBalancerToSubnets",
"elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerPolicy", "elasticloadbalancing:CreateLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerListeners", "elasticloadbalancing:CreateLoadBalancerPolicy",
"elasticloadbalancing:ConfigureHealthCheck", "elasticloadbalancing:CreateLoadBalancerListeners",
"elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:ConfigureHealthCheck",
"elasticloadbalancing:DeleteLoadBalancerListeners", "elasticloadbalancing:DeleteLoadBalancer",
"elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DeleteLoadBalancerListeners",
"elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DetachLoadBalancerFromSubnets", "elasticloadbalancing:DescribeLoadBalancerAttributes",
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer", "elasticloadbalancing:DetachLoadBalancerFromSubnets",
"elasticloadbalancing:ModifyLoadBalancerAttributes", "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
"elasticloadbalancing:RegisterInstancesWithLoadBalancer", "elasticloadbalancing:ModifyLoadBalancerAttributes",
"elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer", "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
"elasticloadbalancing:AddTags", "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
"elasticloadbalancing:CreateListener", "elasticloadbalancing:AddTags",
"elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener",
"elasticloadbalancing:DeleteListener", "elasticloadbalancing:CreateTargetGroup",
"elasticloadbalancing:DeleteTargetGroup", "elasticloadbalancing:DeleteListener",
"elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DeleteTargetGroup",
"elasticloadbalancing:DescribeLoadBalancerPolicies", "elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeLoadBalancerPolicies",
"elasticloadbalancing:DescribeTargetHealth", "elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:ModifyListener", "elasticloadbalancing:DescribeTargetHealth",
"elasticloadbalancing:ModifyTargetGroup", "elasticloadbalancing:ModifyListener",
"elasticloadbalancing:RegisterTargets", "elasticloadbalancing:ModifyTargetGroup",
"elasticloadbalancing:SetLoadBalancerPoliciesOfListener", "elasticloadbalancing:RegisterTargets",
"iam:CreateServiceLinkedRole", "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
"kms:DescribeKey" "iam:CreateServiceLinkedRole",
], "kms:DescribeKey"
"Resource": [ ],
"*" "Resource": [
] "*"
} ]
] }
]
} }
``` ```
@@ -108,24 +109,25 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ecr:GetAuthorizationToken", "ec2:DescribeAvailabilityZones",
"ecr:BatchCheckLayerAvailability", "ecr:GetAuthorizationToken",
"ecr:GetDownloadUrlForLayer", "ecr:BatchCheckLayerAvailability",
"ecr:GetRepositoryPolicy", "ecr:GetDownloadUrlForLayer",
"ecr:DescribeRepositories", "ecr:GetRepositoryPolicy",
"ecr:ListImages", "ecr:DescribeRepositories",
"ecr:BatchGetImage" "ecr:ListImages",
], "ecr:BatchGetImage"
"Resource": "*" ],
"Resource": "*"
} }
] ]
} }
``` ```
i18n/zh/docusaurus-plugin-content-docs/version-2.11/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+83 -81
View File
@@ -36,71 +36,72 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeLaunchConfigurations", "autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeRouteTables", "ec2:DescribeAvailabilityZones",
"ec2:DescribeSecurityGroups", "ec2:DescribeRouteTables",
"ec2:DescribeSubnets", "ec2:DescribeSecurityGroups",
"ec2:DescribeVolumes", "ec2:DescribeSubnets",
"ec2:CreateSecurityGroup", "ec2:DescribeVolumes",
"ec2:CreateTags", "ec2:CreateSecurityGroup",
"ec2:CreateVolume", "ec2:CreateTags",
"ec2:ModifyInstanceAttribute", "ec2:CreateVolume",
"ec2:ModifyVolume", "ec2:ModifyInstanceAttribute",
"ec2:AttachVolume", "ec2:ModifyVolume",
"ec2:AuthorizeSecurityGroupIngress", "ec2:AttachVolume",
"ec2:CreateRoute", "ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteRoute", "ec2:CreateRoute",
"ec2:DeleteSecurityGroup", "ec2:DeleteRoute",
"ec2:DeleteVolume", "ec2:DeleteSecurityGroup",
"ec2:DetachVolume", "ec2:DeleteVolume",
"ec2:RevokeSecurityGroupIngress", "ec2:DetachVolume",
"ec2:DescribeVpcs", "ec2:RevokeSecurityGroupIngress",
"elasticloadbalancing:AddTags", "ec2:DescribeVpcs",
"elasticloadbalancing:AttachLoadBalancerToSubnets", "elasticloadbalancing:AddTags",
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", "elasticloadbalancing:AttachLoadBalancerToSubnets",
"elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerPolicy", "elasticloadbalancing:CreateLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerListeners", "elasticloadbalancing:CreateLoadBalancerPolicy",
"elasticloadbalancing:ConfigureHealthCheck", "elasticloadbalancing:CreateLoadBalancerListeners",
"elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:ConfigureHealthCheck",
"elasticloadbalancing:DeleteLoadBalancerListeners", "elasticloadbalancing:DeleteLoadBalancer",
"elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DeleteLoadBalancerListeners",
"elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DetachLoadBalancerFromSubnets", "elasticloadbalancing:DescribeLoadBalancerAttributes",
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer", "elasticloadbalancing:DetachLoadBalancerFromSubnets",
"elasticloadbalancing:ModifyLoadBalancerAttributes", "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
"elasticloadbalancing:RegisterInstancesWithLoadBalancer", "elasticloadbalancing:ModifyLoadBalancerAttributes",
"elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer", "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
"elasticloadbalancing:AddTags", "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
"elasticloadbalancing:CreateListener", "elasticloadbalancing:AddTags",
"elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener",
"elasticloadbalancing:DeleteListener", "elasticloadbalancing:CreateTargetGroup",
"elasticloadbalancing:DeleteTargetGroup", "elasticloadbalancing:DeleteListener",
"elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DeleteTargetGroup",
"elasticloadbalancing:DescribeLoadBalancerPolicies", "elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeLoadBalancerPolicies",
"elasticloadbalancing:DescribeTargetHealth", "elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:ModifyListener", "elasticloadbalancing:DescribeTargetHealth",
"elasticloadbalancing:ModifyTargetGroup", "elasticloadbalancing:ModifyListener",
"elasticloadbalancing:RegisterTargets", "elasticloadbalancing:ModifyTargetGroup",
"elasticloadbalancing:SetLoadBalancerPoliciesOfListener", "elasticloadbalancing:RegisterTargets",
"iam:CreateServiceLinkedRole", "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
"kms:DescribeKey" "iam:CreateServiceLinkedRole",
], "kms:DescribeKey"
"Resource": [ ],
"*" "Resource": [
] "*"
} ]
] }
]
} }
``` ```
@@ -108,24 +109,25 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ecr:GetAuthorizationToken", "ec2:DescribeAvailabilityZones",
"ecr:BatchCheckLayerAvailability", "ecr:GetAuthorizationToken",
"ecr:GetDownloadUrlForLayer", "ecr:BatchCheckLayerAvailability",
"ecr:GetRepositoryPolicy", "ecr:GetDownloadUrlForLayer",
"ecr:DescribeRepositories", "ecr:GetRepositoryPolicy",
"ecr:ListImages", "ecr:DescribeRepositories",
"ecr:BatchGetImage" "ecr:ListImages",
], "ecr:BatchGetImage"
"Resource": "*" ],
"Resource": "*"
} }
] ]
} }
``` ```
i18n/zh/docusaurus-plugin-content-docs/version-2.12/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+83 -81
View File
@@ -36,71 +36,72 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeLaunchConfigurations", "autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeRouteTables", "ec2:DescribeAvailabilityZones",
"ec2:DescribeSecurityGroups", "ec2:DescribeRouteTables",
"ec2:DescribeSubnets", "ec2:DescribeSecurityGroups",
"ec2:DescribeVolumes", "ec2:DescribeSubnets",
"ec2:CreateSecurityGroup", "ec2:DescribeVolumes",
"ec2:CreateTags", "ec2:CreateSecurityGroup",
"ec2:CreateVolume", "ec2:CreateTags",
"ec2:ModifyInstanceAttribute", "ec2:CreateVolume",
"ec2:ModifyVolume", "ec2:ModifyInstanceAttribute",
"ec2:AttachVolume", "ec2:ModifyVolume",
"ec2:AuthorizeSecurityGroupIngress", "ec2:AttachVolume",
"ec2:CreateRoute", "ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteRoute", "ec2:CreateRoute",
"ec2:DeleteSecurityGroup", "ec2:DeleteRoute",
"ec2:DeleteVolume", "ec2:DeleteSecurityGroup",
"ec2:DetachVolume", "ec2:DeleteVolume",
"ec2:RevokeSecurityGroupIngress", "ec2:DetachVolume",
"ec2:DescribeVpcs", "ec2:RevokeSecurityGroupIngress",
"elasticloadbalancing:AddTags", "ec2:DescribeVpcs",
"elasticloadbalancing:AttachLoadBalancerToSubnets", "elasticloadbalancing:AddTags",
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", "elasticloadbalancing:AttachLoadBalancerToSubnets",
"elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerPolicy", "elasticloadbalancing:CreateLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerListeners", "elasticloadbalancing:CreateLoadBalancerPolicy",
"elasticloadbalancing:ConfigureHealthCheck", "elasticloadbalancing:CreateLoadBalancerListeners",
"elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:ConfigureHealthCheck",
"elasticloadbalancing:DeleteLoadBalancerListeners", "elasticloadbalancing:DeleteLoadBalancer",
"elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DeleteLoadBalancerListeners",
"elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DetachLoadBalancerFromSubnets", "elasticloadbalancing:DescribeLoadBalancerAttributes",
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer", "elasticloadbalancing:DetachLoadBalancerFromSubnets",
"elasticloadbalancing:ModifyLoadBalancerAttributes", "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
"elasticloadbalancing:RegisterInstancesWithLoadBalancer", "elasticloadbalancing:ModifyLoadBalancerAttributes",
"elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer", "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
"elasticloadbalancing:AddTags", "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
"elasticloadbalancing:CreateListener", "elasticloadbalancing:AddTags",
"elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener",
"elasticloadbalancing:DeleteListener", "elasticloadbalancing:CreateTargetGroup",
"elasticloadbalancing:DeleteTargetGroup", "elasticloadbalancing:DeleteListener",
"elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DeleteTargetGroup",
"elasticloadbalancing:DescribeLoadBalancerPolicies", "elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeLoadBalancerPolicies",
"elasticloadbalancing:DescribeTargetHealth", "elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:ModifyListener", "elasticloadbalancing:DescribeTargetHealth",
"elasticloadbalancing:ModifyTargetGroup", "elasticloadbalancing:ModifyListener",
"elasticloadbalancing:RegisterTargets", "elasticloadbalancing:ModifyTargetGroup",
"elasticloadbalancing:SetLoadBalancerPoliciesOfListener", "elasticloadbalancing:RegisterTargets",
"iam:CreateServiceLinkedRole", "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
"kms:DescribeKey" "iam:CreateServiceLinkedRole",
], "kms:DescribeKey"
"Resource": [ ],
"*" "Resource": [
] "*"
} ]
] }
]
} }
``` ```
@@ -108,24 +109,25 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ecr:GetAuthorizationToken", "ec2:DescribeAvailabilityZones",
"ecr:BatchCheckLayerAvailability", "ecr:GetAuthorizationToken",
"ecr:GetDownloadUrlForLayer", "ecr:BatchCheckLayerAvailability",
"ecr:GetRepositoryPolicy", "ecr:GetDownloadUrlForLayer",
"ecr:DescribeRepositories", "ecr:GetRepositoryPolicy",
"ecr:ListImages", "ecr:DescribeRepositories",
"ecr:BatchGetImage" "ecr:ListImages",
], "ecr:BatchGetImage"
"Resource": "*" ],
"Resource": "*"
} }
] ]
} }
``` ```
i18n/zh/docusaurus-plugin-content-docs/version-2.13/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+83 -81
View File
@@ -36,71 +36,72 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeLaunchConfigurations", "autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeRouteTables", "ec2:DescribeAvailabilityZones",
"ec2:DescribeSecurityGroups", "ec2:DescribeRouteTables",
"ec2:DescribeSubnets", "ec2:DescribeSecurityGroups",
"ec2:DescribeVolumes", "ec2:DescribeSubnets",
"ec2:CreateSecurityGroup", "ec2:DescribeVolumes",
"ec2:CreateTags", "ec2:CreateSecurityGroup",
"ec2:CreateVolume", "ec2:CreateTags",
"ec2:ModifyInstanceAttribute", "ec2:CreateVolume",
"ec2:ModifyVolume", "ec2:ModifyInstanceAttribute",
"ec2:AttachVolume", "ec2:ModifyVolume",
"ec2:AuthorizeSecurityGroupIngress", "ec2:AttachVolume",
"ec2:CreateRoute", "ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteRoute", "ec2:CreateRoute",
"ec2:DeleteSecurityGroup", "ec2:DeleteRoute",
"ec2:DeleteVolume", "ec2:DeleteSecurityGroup",
"ec2:DetachVolume", "ec2:DeleteVolume",
"ec2:RevokeSecurityGroupIngress", "ec2:DetachVolume",
"ec2:DescribeVpcs", "ec2:RevokeSecurityGroupIngress",
"elasticloadbalancing:AddTags", "ec2:DescribeVpcs",
"elasticloadbalancing:AttachLoadBalancerToSubnets", "elasticloadbalancing:AddTags",
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", "elasticloadbalancing:AttachLoadBalancerToSubnets",
"elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerPolicy", "elasticloadbalancing:CreateLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerListeners", "elasticloadbalancing:CreateLoadBalancerPolicy",
"elasticloadbalancing:ConfigureHealthCheck", "elasticloadbalancing:CreateLoadBalancerListeners",
"elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:ConfigureHealthCheck",
"elasticloadbalancing:DeleteLoadBalancerListeners", "elasticloadbalancing:DeleteLoadBalancer",
"elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DeleteLoadBalancerListeners",
"elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DetachLoadBalancerFromSubnets", "elasticloadbalancing:DescribeLoadBalancerAttributes",
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer", "elasticloadbalancing:DetachLoadBalancerFromSubnets",
"elasticloadbalancing:ModifyLoadBalancerAttributes", "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
"elasticloadbalancing:RegisterInstancesWithLoadBalancer", "elasticloadbalancing:ModifyLoadBalancerAttributes",
"elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer", "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
"elasticloadbalancing:AddTags", "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
"elasticloadbalancing:CreateListener", "elasticloadbalancing:AddTags",
"elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener",
"elasticloadbalancing:DeleteListener", "elasticloadbalancing:CreateTargetGroup",
"elasticloadbalancing:DeleteTargetGroup", "elasticloadbalancing:DeleteListener",
"elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DeleteTargetGroup",
"elasticloadbalancing:DescribeLoadBalancerPolicies", "elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeLoadBalancerPolicies",
"elasticloadbalancing:DescribeTargetHealth", "elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:ModifyListener", "elasticloadbalancing:DescribeTargetHealth",
"elasticloadbalancing:ModifyTargetGroup", "elasticloadbalancing:ModifyListener",
"elasticloadbalancing:RegisterTargets", "elasticloadbalancing:ModifyTargetGroup",
"elasticloadbalancing:SetLoadBalancerPoliciesOfListener", "elasticloadbalancing:RegisterTargets",
"iam:CreateServiceLinkedRole", "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
"kms:DescribeKey" "iam:CreateServiceLinkedRole",
], "kms:DescribeKey"
"Resource": [ ],
"*" "Resource": [
] "*"
} ]
] }
]
} }
``` ```
@@ -108,24 +109,25 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ecr:GetAuthorizationToken", "ec2:DescribeAvailabilityZones",
"ecr:BatchCheckLayerAvailability", "ecr:GetAuthorizationToken",
"ecr:GetDownloadUrlForLayer", "ecr:BatchCheckLayerAvailability",
"ecr:GetRepositoryPolicy", "ecr:GetDownloadUrlForLayer",
"ecr:DescribeRepositories", "ecr:GetRepositoryPolicy",
"ecr:ListImages", "ecr:DescribeRepositories",
"ecr:BatchGetImage" "ecr:ListImages",
], "ecr:BatchGetImage"
"Resource": "*" ],
"Resource": "*"
} }
] ]
} }
``` ```
i18n/zh/docusaurus-plugin-content-docs/version-2.9/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+83 -81
View File
@@ -36,71 +36,72 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeLaunchConfigurations", "autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeRouteTables", "ec2:DescribeAvailabilityZones",
"ec2:DescribeSecurityGroups", "ec2:DescribeRouteTables",
"ec2:DescribeSubnets", "ec2:DescribeSecurityGroups",
"ec2:DescribeVolumes", "ec2:DescribeSubnets",
"ec2:CreateSecurityGroup", "ec2:DescribeVolumes",
"ec2:CreateTags", "ec2:CreateSecurityGroup",
"ec2:CreateVolume", "ec2:CreateTags",
"ec2:ModifyInstanceAttribute", "ec2:CreateVolume",
"ec2:ModifyVolume", "ec2:ModifyInstanceAttribute",
"ec2:AttachVolume", "ec2:ModifyVolume",
"ec2:AuthorizeSecurityGroupIngress", "ec2:AttachVolume",
"ec2:CreateRoute", "ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteRoute", "ec2:CreateRoute",
"ec2:DeleteSecurityGroup", "ec2:DeleteRoute",
"ec2:DeleteVolume", "ec2:DeleteSecurityGroup",
"ec2:DetachVolume", "ec2:DeleteVolume",
"ec2:RevokeSecurityGroupIngress", "ec2:DetachVolume",
"ec2:DescribeVpcs", "ec2:RevokeSecurityGroupIngress",
"elasticloadbalancing:AddTags", "ec2:DescribeVpcs",
"elasticloadbalancing:AttachLoadBalancerToSubnets", "elasticloadbalancing:AddTags",
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", "elasticloadbalancing:AttachLoadBalancerToSubnets",
"elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerPolicy", "elasticloadbalancing:CreateLoadBalancer",
"elasticloadbalancing:CreateLoadBalancerListeners", "elasticloadbalancing:CreateLoadBalancerPolicy",
"elasticloadbalancing:ConfigureHealthCheck", "elasticloadbalancing:CreateLoadBalancerListeners",
"elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:ConfigureHealthCheck",
"elasticloadbalancing:DeleteLoadBalancerListeners", "elasticloadbalancing:DeleteLoadBalancer",
"elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DeleteLoadBalancerListeners",
"elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DetachLoadBalancerFromSubnets", "elasticloadbalancing:DescribeLoadBalancerAttributes",
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer", "elasticloadbalancing:DetachLoadBalancerFromSubnets",
"elasticloadbalancing:ModifyLoadBalancerAttributes", "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
"elasticloadbalancing:RegisterInstancesWithLoadBalancer", "elasticloadbalancing:ModifyLoadBalancerAttributes",
"elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer", "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
"elasticloadbalancing:AddTags", "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
"elasticloadbalancing:CreateListener", "elasticloadbalancing:AddTags",
"elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener",
"elasticloadbalancing:DeleteListener", "elasticloadbalancing:CreateTargetGroup",
"elasticloadbalancing:DeleteTargetGroup", "elasticloadbalancing:DeleteListener",
"elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DeleteTargetGroup",
"elasticloadbalancing:DescribeLoadBalancerPolicies", "elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeLoadBalancerPolicies",
"elasticloadbalancing:DescribeTargetHealth", "elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:ModifyListener", "elasticloadbalancing:DescribeTargetHealth",
"elasticloadbalancing:ModifyTargetGroup", "elasticloadbalancing:ModifyListener",
"elasticloadbalancing:RegisterTargets", "elasticloadbalancing:ModifyTargetGroup",
"elasticloadbalancing:SetLoadBalancerPoliciesOfListener", "elasticloadbalancing:RegisterTargets",
"iam:CreateServiceLinkedRole", "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
"kms:DescribeKey" "iam:CreateServiceLinkedRole",
], "kms:DescribeKey"
"Resource": [ ],
"*" "Resource": [
] "*"
} ]
] }
]
} }
``` ```
@@ -108,24 +109,25 @@ weight: 1
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ecr:GetAuthorizationToken", "ec2:DescribeAvailabilityZones",
"ecr:BatchCheckLayerAvailability", "ecr:GetAuthorizationToken",
"ecr:GetDownloadUrlForLayer", "ecr:BatchCheckLayerAvailability",
"ecr:GetRepositoryPolicy", "ecr:GetDownloadUrlForLayer",
"ecr:DescribeRepositories", "ecr:GetRepositoryPolicy",
"ecr:ListImages", "ecr:DescribeRepositories",
"ecr:BatchGetImage" "ecr:ListImages",
], "ecr:BatchGetImage"
"Resource": "*" ],
"Resource": "*"
} }
] ]
} }
``` ```
versioned_docs/version-2.10/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+2
View File
@@ -54,6 +54,7 @@ IAM Policy for nodes with the `controlplane` role:
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeRouteTables", "ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups", "ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets", "ec2:DescribeSubnets",
@@ -123,6 +124,7 @@ IAM policy for nodes with the `etcd` or `worker` role:
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ecr:GetAuthorizationToken", "ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability", "ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer", "ecr:GetDownloadUrlForLayer",
versioned_docs/version-2.11/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+2
View File
@@ -54,6 +54,7 @@ IAM Policy for nodes with the `controlplane` role:
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeRouteTables", "ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups", "ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets", "ec2:DescribeSubnets",
@@ -123,6 +124,7 @@ IAM policy for nodes with the `etcd` or `worker` role:
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ecr:GetAuthorizationToken", "ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability", "ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer", "ecr:GetDownloadUrlForLayer",
versioned_docs/version-2.12/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+2
View File
@@ -54,6 +54,7 @@ IAM Policy for nodes with the `controlplane` role:
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeRouteTables", "ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups", "ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets", "ec2:DescribeSubnets",
@@ -123,6 +124,7 @@ IAM policy for nodes with the `etcd` or `worker` role:
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ecr:GetAuthorizationToken", "ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability", "ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer", "ecr:GetDownloadUrlForLayer",
versioned_docs/version-2.13/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+2
View File
@@ -54,6 +54,7 @@ IAM Policy for nodes with the `controlplane` role:
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeRouteTables", "ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups", "ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets", "ec2:DescribeSubnets",
@@ -123,6 +124,7 @@ IAM policy for nodes with the `etcd` or `worker` role:
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ecr:GetAuthorizationToken", "ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability", "ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer", "ecr:GetDownloadUrlForLayer",
versioned_docs/version-2.9/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-cloud-providers/amazon.md
+2
View File
@@ -54,6 +54,7 @@ IAM Policy for nodes with the `controlplane` role:
"autoscaling:DescribeTags", "autoscaling:DescribeTags",
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeRouteTables", "ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups", "ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets", "ec2:DescribeSubnets",
@@ -123,6 +124,7 @@ IAM policy for nodes with the `etcd` or `worker` role:
"Action": [ "Action": [
"ec2:DescribeInstances", "ec2:DescribeInstances",
"ec2:DescribeRegions", "ec2:DescribeRegions",
"ec2:DescribeAvailabilityZones",
"ecr:GetAuthorizationToken", "ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability", "ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer", "ecr:GetDownloadUrlForLayer",