mirror of
https://github.com/opentofu/opentofu.git
synced 2025-02-25 18:45:20 -06:00
provider/aws: aws_spot_fleet_request
was leaving orphaned instances
running Each nightly build was leaving multiple instances running. The issue is that the IAM role we were using didn't have access to Terminate the EC2 instances The role was missing the ec2 principle
This commit is contained in:
parent
b709d27cf7
commit
4d2b9cb167
@ -403,7 +403,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -451,7 +454,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -499,7 +505,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -554,7 +563,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -625,7 +637,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -680,7 +695,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -745,7 +763,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -801,7 +822,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
@ -863,7 +887,10 @@ resource "aws_iam_role" "test-role" {
|
|||||||
"Sid": "",
|
"Sid": "",
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Principal": {
|
"Principal": {
|
||||||
"Service": "spotfleet.amazonaws.com"
|
"Service": [
|
||||||
|
"spotfleet.amazonaws.com",
|
||||||
|
"ec2.amazonaws.com"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
"Action": "sts:AssumeRole"
|
"Action": "sts:AssumeRole"
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user