Update expected tests and upup codes

Signed-off-by: AkiraFukushima <h3.poteto@gmail.com>
kubernetes · Feb 4, 2021 · 17c35f0 · 17c35f0
1 parent 46bd770
commit 17c35f0
Show file tree

Hide file tree

Showing 52 changed files with 334 additions and 5 deletions.
diff --git a/pkg/model/iam/tests/iam_builder_master_legacy.json b/pkg/model/iam/tests/iam_builder_master_legacy.json
@@ -44,6 +44,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "s3:*"

diff --git a/pkg/model/iam/tests/iam_builder_master_strict.json b/pkg/model/iam/tests/iam_builder_master_strict.json
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "s3:Get*"

diff --git a/pkg/model/iam/tests/iam_builder_master_strict_ecr.json b/pkg/model/iam/tests/iam_builder_master_strict_ecr.json
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "s3:Get*"

diff --git a/...nadditional_user-data/data/aws_iam_role_policy_masters.bastionuserdata.example.com_policy b/...nadditional_user-data/data/aws_iam_role_policy_masters.bastionuserdata.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/complex/cloudformation.json b/tests/integration/update_cluster/complex/cloudformation.json
@@ -1520,6 +1520,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/...ration/update_cluster/complex/data/aws_iam_role_policy_masters.complex.example.com_policy b/...ration/update_cluster/complex/data/aws_iam_role_policy_masters.complex.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/...tion/update_cluster/compress/data/aws_iam_role_policy_masters.compress.example.com_policy b/...tion/update_cluster/compress/data/aws_iam_role_policy_masters.compress.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/containerd-custom/cloudformation.json b/tests/integration/update_cluster/containerd-custom/cloudformation.json
@@ -1005,6 +1005,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/containerd/cloudformation.json b/tests/integration/update_cluster/containerd/cloudformation.json
@@ -1005,6 +1005,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/docker-custom/cloudformation.json b/tests/integration/update_cluster/docker-custom/cloudformation.json
@@ -1005,6 +1005,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/...update_cluster/existing_sg/data/aws_iam_role_policy_masters.existingsg.example.com_policy b/...update_cluster/existing_sg/data/aws_iam_role_policy_masters.existingsg.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/externallb/cloudformation.json b/tests/integration/update_cluster/externallb/cloudformation.json
@@ -1021,6 +1021,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/.../update_cluster/externallb/data/aws_iam_role_policy_masters.externallb.example.com_policy b/.../update_cluster/externallb/data/aws_iam_role_policy_masters.externallb.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/...ter/externalpolicies/data/aws_iam_role_policy_masters.externalpolicies.example.com_policy b/...ter/externalpolicies/data/aws_iam_role_policy_masters.externalpolicies.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/ha/data/aws_iam_role_policy_masters.ha.example.com_policy b/tests/integration/update_cluster/ha/data/aws_iam_role_policy_masters.ha.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/launch_templates/cloudformation.json b/tests/integration/update_cluster/launch_templates/cloudformation.json
@@ -1234,6 +1234,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/...ster/launch_templates/data/aws_iam_role_policy_masters.launchtemplates.example.com_policy b/...ster/launch_templates/data/aws_iam_role_policy_masters.launchtemplates.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/minimal-cloudformation/cloudformation.json b/tests/integration/update_cluster/minimal-cloudformation/cloudformation.json
@@ -1005,6 +1005,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/minimal-gp3/cloudformation.json b/tests/integration/update_cluster/minimal-gp3/cloudformation.json
@@ -1001,6 +1001,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/...on/update_cluster/minimal-gp3/data/aws_iam_role_policy_masters.minimal.example.com_policy b/...on/update_cluster/minimal-gp3/data/aws_iam_role_policy_masters.minimal.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/...ate_cluster/minimal-json/data/aws_iam_role_policy_masters.minimal-json.example.com_policy b/...ate_cluster/minimal-json/data/aws_iam_role_policy_masters.minimal-json.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/...ration/update_cluster/minimal/data/aws_iam_role_policy_masters.minimal.example.com_policy b/...ration/update_cluster/minimal/data/aws_iam_role_policy_masters.minimal.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/mixed_instances/cloudformation.json b/tests/integration/update_cluster/mixed_instances/cloudformation.json
@@ -1656,6 +1656,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/...luster/mixed_instances/data/aws_iam_role_policy_masters.mixedinstances.example.com_policy b/...luster/mixed_instances/data/aws_iam_role_policy_masters.mixedinstances.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/mixed_instances_spot/cloudformation.json b/tests/integration/update_cluster/mixed_instances_spot/cloudformation.json
@@ -1657,6 +1657,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/...r/mixed_instances_spot/data/aws_iam_role_policy_masters.mixedinstances.example.com_policy b/...r/mixed_instances_spot/data/aws_iam_role_policy_masters.mixedinstances.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",

diff --git a/tests/integration/update_cluster/private-shared-ip/cloudformation.json b/tests/integration/update_cluster/private-shared-ip/cloudformation.json
@@ -1500,6 +1500,13 @@
                 "*"
               ]
             },
+            {
+              "Action": "iam:GetInstanceProfile",
+              "Effect": "Allow",
+              "Resource": [
+                "*"
+              ]
+            },
             {
               "Action": [
                 "route53:ChangeResourceRecordSets",

diff --git a/...r/private-shared-ip/data/aws_iam_role_policy_masters.private-shared-ip.example.com_policy b/...r/private-shared-ip/data/aws_iam_role_policy_masters.private-shared-ip.example.com_policy
@@ -136,6 +136,13 @@
         "*"
       ]
     },
+    {
+      "Action": "iam:GetInstanceProfile",
+      "Effect": "Allow",
+      "Resource": [
+        "*"
+      ]
+    },
     {
       "Action": [
         "route53:ChangeResourceRecordSets",