./hack/update-expected.sh

rifelpet · rifelpet · commit d40cb29536eb · 2026-04-20T15:13:42.000-05:00
diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/aws-lb-controller/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
@@ -15,6 +15,30 @@
       "Effect": "Allow",
       "Resource": "*"
     },
+    {
+      "Action": "elasticloadbalancing:AddTags",
+      "Condition": {
+        "StringEquals": {
+          "aws:RequestTag/elbv2.k8s.aws/cluster": "minimal.example.com",
+          "elasticloadbalancing:CreateAction": [
+            "CreateListener",
+            "CreateLoadBalancer",
+            "CreateRule",
+            "CreateTargetGroup"
+          ]
+        }
+      },
+      "Effect": "Allow",
+      "Resource": [
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/app/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/net/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:targetgroup/*/*"
+      ]
+    },
     {
       "Action": "ec2:CreateTags",
       "Condition": {
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
@@ -15,6 +15,30 @@
       "Effect": "Allow",
       "Resource": "*"
     },
+    {
+      "Action": "elasticloadbalancing:AddTags",
+      "Condition": {
+        "StringEquals": {
+          "aws:RequestTag/elbv2.k8s.aws/cluster": "minimal.example.com",
+          "elasticloadbalancing:CreateAction": [
+            "CreateListener",
+            "CreateLoadBalancer",
+            "CreateRule",
+            "CreateTargetGroup"
+          ]
+        }
+      },
+      "Effect": "Allow",
+      "Resource": [
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/app/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/net/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:targetgroup/*/*"
+      ]
+    },
     {
       "Action": "ec2:CreateTags",
       "Condition": {
diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_iam_role_policy_masters.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm/data/aws_iam_role_policy_masters.minimal.example.com_policy
@@ -225,6 +225,30 @@
       "Effect": "Allow",
       "Resource": "*"
     },
+    {
+      "Action": "elasticloadbalancing:AddTags",
+      "Condition": {
+        "StringEquals": {
+          "aws:RequestTag/elbv2.k8s.aws/cluster": "minimal.example.com",
+          "elasticloadbalancing:CreateAction": [
+            "CreateListener",
+            "CreateLoadBalancer",
+            "CreateRule",
+            "CreateTargetGroup"
+          ]
+        }
+      },
+      "Effect": "Allow",
+      "Resource": [
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/app/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/net/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:targetgroup/*/*"
+      ]
+    },
     {
       "Action": "ec2:CreateTags",
       "Condition": {
diff --git a/tests/integration/update_cluster/many-addons/data/aws_iam_role_policy_masters.many-addons.example.com_policy b/tests/integration/update_cluster/many-addons/data/aws_iam_role_policy_masters.many-addons.example.com_policy
@@ -225,6 +225,30 @@
       "Effect": "Allow",
       "Resource": "*"
     },
+    {
+      "Action": "elasticloadbalancing:AddTags",
+      "Condition": {
+        "StringEquals": {
+          "aws:RequestTag/elbv2.k8s.aws/cluster": "many-addons.example.com",
+          "elasticloadbalancing:CreateAction": [
+            "CreateListener",
+            "CreateLoadBalancer",
+            "CreateRule",
+            "CreateTargetGroup"
+          ]
+        }
+      },
+      "Effect": "Allow",
+      "Resource": [
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener-rule/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/app/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:listener/net/*/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/app/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:loadbalancer/net/*/*",
+        "arn:aws-test:elasticloadbalancing:*:*:targetgroup/*/*"
+      ]
+    },
     {
       "Action": "ec2:CreateTags",
       "Condition": {
