Skip to content

Commit e0750b4

Browse files
committed
fix: SSM 배포 안정성 개선
- IAM S3 권한에 s3:ListBucket 추가 - Phase 4 play에 KUBECONFIG 환경변수 명시 - ansible.cfg에서 SSH 설정 제거, deprecation 경고 억제
1 parent 71b4c31 commit e0750b4

3 files changed

Lines changed: 5 additions & 4 deletions

File tree

IaC/3-v3/ansible/ansible.cfg

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,4 @@ roles_path = ./roles
33
inventory = ./inventory/aws_ec2.yaml
44
host_key_checking = False
55
timeout = 60
6-
7-
[ssh_connection]
8-
pipelining = True
6+
deprecation_warnings = False

IaC/3-v3/ansible/playbooks/site.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,8 @@
3030
- name: Install cluster components
3131
hosts: role_control_plane
3232
become: true
33+
environment:
34+
KUBECONFIG: /home/ubuntu/.kube/config
3335
roles:
3436
- calico
3537
- ebs-csi

IaC/3-v3/aws/modules/iam/main.tf

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -98,7 +98,8 @@ resource "aws_iam_role_policy" "ssm_s3" {
9898
"s3:GetObject",
9999
"s3:PutObject",
100100
"s3:DeleteObject",
101-
"s3:GetBucketLocation"
101+
"s3:GetBucketLocation",
102+
"s3:ListBucket"
102103
]
103104
Resource = [
104105
"arn:aws:s3:::dojangkok-v3-ansible-ssm",

0 commit comments

Comments
 (0)