From 83b27eb025cea1a9e1eb32c751d939a03eba2e64 Mon Sep 17 00:00:00 2001 From: Abhishek Veeramalla Date: Mon, 3 Feb 2025 11:42:54 +0530 Subject: [PATCH] Update 04-alb-configuration.md --- EKS/04-alb-configuration.md | 39 ------------------------------------- 1 file changed, 39 deletions(-) diff --git a/EKS/04-alb-configuration.md b/EKS/04-alb-configuration.md index d996afc04..7e4bba334 100644 --- a/EKS/04-alb-configuration.md +++ b/EKS/04-alb-configuration.md @@ -57,42 +57,3 @@ Verify that the deployments are running. ``` kubectl get deployment -n kube-system aws-load-balancer-controller ``` - -You might face the issue, unable to see the loadbalancer address while giving k get ing -n robot-shop at the end. To avoid this your **AWSLoadBalancerControllerIAMPolicy** should have the required permissions for elasticloadbalancing:DescribeListenerAttributes. - -## Run the following command to retrieve the policy details and look for **elasticloadbalancing:DescribeListenerAttributes** in the policy document. -``` -aws iam get-policy-version \ - --policy-arn arn:aws:iam:::policy/AWSLoadBalancerControllerIAMPolicy \ - --version-id $(aws iam get-policy --policy-arn arn:aws:iam:::policy/AWSLoadBalancerControllerIAMPolicy --query 'Policy.DefaultVersionId' --output text) -``` - -If the required permission is missing, update the policy to include it -## Download the current policy -``` -aws iam get-policy-version \ - --policy-arn arn:aws:iam:::policy/AWSLoadBalancerControllerIAMPolicy \ - --version-id $(aws iam get-policy --policy-arn arn:aws:iam:::policy/AWSLoadBalancerControllerIAMPolicy --query 'Policy.DefaultVersionId' --output text) \ - --query 'PolicyVersion.Document' --output json > policy.json -``` -## Edit policy.json to add the missing permissions -``` -{ - "Effect": "Allow", - "Action": "elasticloadbalancing:DescribeListenerAttributes", - "Resource": "*" -} -``` -## Create a new policy version -``` -aws iam create-policy-version \ - --policy-arn arn:aws:iam:::policy/AWSLoadBalancerControllerIAMPolicy \ - --policy-document file://policy.json \ - --set-as-default -``` - - - - - -