feat: allow access to instances using session manager

Enable SSM Agent for masters and nodes by attaching the IAM policy as external policy
opzkit · Sep 15, 2022 · 46e7e63 · 46e7e63
1 parent 2d50909
commit 46e7e63
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/k8s.tf b/k8s.tf
@@ -193,6 +193,16 @@ resource "kops_cluster" "k8s" {
   addons {
     manifest = "s3://${var.bucket_state_store.id}/${var.name}-addons/addon.yaml"
   }
+
+  external_policies {
+    key   = "master"
+    value = ["arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"]
+  }
+
+  external_policies {
+    key   = "node"
+    value = ["arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"]
+  }
 }
 
 resource "kops_instance_group" "masters" {