add ipv6 cni stuff

wagov-dtt · Aug 22, 2024 · b38f22b · b38f22b
1 parent 71a03e2
commit b38f22b
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/rancher_setup/aws-eks.yaml b/rancher_setup/aws-eks.yaml
@@ -167,6 +167,24 @@ Resources:
         - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
         - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
         - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
+      Policies:
+        - PolicyName: AmazonEKS_CNI_IPv6_Policy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - ec2:AssignIpv6Addresses
+                  - ec2:DescribeInstances
+                  - ec2:DescribeTags
+                  - ec2:DescribeNetworkInterfaces
+                  - ec2:DescribeInstanceTypes
+                Resource: "*"
+              - Effect: Allow
+                Action:
+                  - ec2:CreateTags
+                Resource:
+                  - arn:aws:ec2:*:*:network-interface/*
 
   NodeLaunchTemplate:
     Type: AWS::EC2::LaunchTemplate