[iam-role-for-service-accounts-eks]: new IAM policy action required for aws-load-balancer-controller v2.7.0

[antoineco]

Is your request related to a problem? Please describe.

A new feature was added to aws-load-balancer-controller in v2.7.0: mutual TLS authentication support for Ingress.

This feature requires a new IAM policy permission: elasticloadbalancing:DescribeTrustStores.

Describe the solution you'd like.

The action can be added to the existing "load_balancer_controller" aws_iam_policy_document:

terraform-aws-iam/modules/iam-role-for-service-accounts-eks/policies.tf

Lines 788 to 793 in cbb39cb

	"elasticloadbalancing:DescribeTargetGroupAttributes",
	"elasticloadbalancing:DescribeTargetHealth",
	"elasticloadbalancing:DescribeTags",
	]
	resources = ["*"]
	}

Describe alternatives you've considered.

Additional context

[antonbabenko]

This issue has been resolved in version 5.34.0 🎉

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.