cd1c6173f4
This changeset provides two basic e2e tests for CSI plugins targeting common AWS use cases. The EBS test launches the EBS plugin (controller + nodes) and registers an EBS volume as a Nomad CSI volume. We deploy a job that writes to the volume, stop that job, and reuse the volume for another job which should be able to read the data written by the first job. The EFS test launches the EFS plugin (nodes-only) and registers an EFS volume as a Nomad CSI volume. We deploy a job that writes to the volume, stop that job, and reuse the volume for another job which should be able to read the data written by the first job. The writer jobs mount the CSI volume at a location within the alloc dir.
68 lines
1.5 KiB
HCL
68 lines
1.5 KiB
HCL
resource "aws_iam_instance_profile" "instance_profile" {
|
|
name_prefix = local.random_name
|
|
role = aws_iam_role.instance_role.name
|
|
}
|
|
|
|
resource "aws_iam_role" "instance_role" {
|
|
name_prefix = local.random_name
|
|
assume_role_policy = data.aws_iam_policy_document.instance_role.json
|
|
}
|
|
|
|
data "aws_iam_policy_document" "instance_role" {
|
|
statement {
|
|
effect = "Allow"
|
|
actions = ["sts:AssumeRole"]
|
|
|
|
principals {
|
|
type = "Service"
|
|
identifiers = ["ec2.amazonaws.com"]
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "aws_iam_role_policy" "auto_discover_cluster" {
|
|
name = "auto-discover-cluster"
|
|
role = aws_iam_role.instance_role.id
|
|
policy = data.aws_iam_policy_document.auto_discover_cluster.json
|
|
}
|
|
|
|
# Note: Overloading this instance profile to access
|
|
# test binaries, should be renamed.
|
|
data "aws_iam_policy_document" "auto_discover_cluster" {
|
|
statement {
|
|
effect = "Allow"
|
|
|
|
actions = [
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeTags",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
]
|
|
resources = ["*"]
|
|
}
|
|
|
|
statement {
|
|
effect = "Allow"
|
|
|
|
actions = [
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeTags",
|
|
"ec2:DescribeVolume*",
|
|
"ec2:AttachVolume",
|
|
"ec2:DetachVolume",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
]
|
|
resources = ["*"]
|
|
}
|
|
|
|
statement {
|
|
effect = "Allow"
|
|
|
|
actions = [
|
|
"s3:PutObject",
|
|
"s3:GetObject",
|
|
"s3:DeleteObject",
|
|
]
|
|
resources = ["arn:aws:s3:::nomad-team-test-binary/*"]
|
|
}
|
|
}
|