removing shared from tmpl

Author: steve-fraser

castai/policies/policy.go

@@ -42,18 +42,18 @@ func GetUserInlinePolicy(clusterName, arn, vpc, partition, sharedVPCArn string)
 	if err != nil {
 		return "", fmt.Errorf("parsing template: %w", err)
 	}
-
+	var vpcArn string
 	// If sharedVPCArn is not provided, use the main ARN for VPC/subnet resources
 	if sharedVPCArn == "" {
-		sharedVPCArn = arn
+		vpcArn = arn
 	}
 
 	type tmplValues struct {
 		ClusterName  string
 		ARN          string
 		VPC          string
 		Partition    string
-		SharedVPCArn string
+		VPCArn string
 	}
 
 	var buf bytes.Buffer
@@ -63,7 +63,7 @@ func GetUserInlinePolicy(clusterName, arn, vpc, partition, sharedVPCArn string)
 		ARN:          arn,
 		VPC:          vpc,
 		Partition:    partition,
-		SharedVPCArn: sharedVPCArn,
+		VPCArn: vpcArn,
 	}); err != nil {
 		return "", fmt.Errorf("interpolating template: %w", err)
 	}

castai/policies/user-policy.json

@@ -16,10 +16,10 @@
       "Sid": "RunInstancesVpcRestriction",
       "Effect": "Allow",
       "Action": "ec2:RunInstances",
-      "Resource": "arn:{{ .Partition }}:ec2:{{ .SharedVPCArn }}:subnet/*",
+      "Resource": "arn:{{ .Partition }}:ec2:{{ .VPCArn }}:subnet/*",
       "Condition": {
         "StringEquals": {
-          "ec2:Vpc": "arn:{{ .Partition }}:ec2:{{ .SharedVPCArn }}:vpc/{{ .VPC }}"
+          "ec2:Vpc": "arn:{{ .Partition }}:ec2:{{ .VPCArn }}:vpc/{{ .VPC }}"
         }
       }
     },