update CFN test fixture with new EKS permissions

joshfrench · joshfrench · commit 33317acdb941 · 2025-11-16T15:29:46.000-08:00
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/customsuffix.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/customsuffix.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/default.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/default.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_all_secret_backends.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_all_secret_backends.yaml
@@ -257,6 +257,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_allow_assume_role.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_allow_assume_role.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_bootstrap_user.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_bootstrap_user.yaml
@@ -257,6 +257,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_custom_bootstrap_user.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_custom_bootstrap_user.yaml
@@ -257,6 +257,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_different_instance_profiles.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_different_instance_profiles.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_console.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_console.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_default_roles.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_default_roles.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_disable.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_disable.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_kms_prefix.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_eks_kms_prefix.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_extra_statements.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_extra_statements.yaml
@@ -257,6 +257,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_s3_bucket.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_s3_bucket.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
diff --git a/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_ssm_secret_backend.yaml b/cmd/clusterawsadm/cloudformation/bootstrap/fixtures/with_ssm_secret_backend.yaml
@@ -251,6 +251,14 @@ Resources:
           - ec2:DeleteLaunchTemplateVersions
           - ec2:DescribeKeyPairs
           - ec2:ModifyInstanceMetadataOptions
+          - eks:CreateAccessEntry
+          - eks:DeleteAccessEntry
+          - eks:DescribeAccessEntry
+          - eks:UpdateAccessEntry
+          - eks:ListAccessEntries
+          - eks:AssociateAccessPolicy
+          - eks:DisassociateAccessPolicy
+          - eks:ListAssociatedAccessPolicies
           Effect: Allow
           Resource:
           - '*'
