0.7.0

EKS

Luna can now query image families in EKS from the System Manager parameter Store. As a result Luna manager 0.6.7+ requires additional IAM permissions ssm:GetParameter to query the SSM database to get the image ID.

To upgrade to 0.7.0 from a previous version you can either:

1. Uninstall Luna and reinstall it with the deploy.sh script
2. Edit the IAM policy attached to the Luna manager service account

For option #2, the IAM policy will be named ${CLUSTER_NAME}-${NAMESPACE}-LunaAssumeRoleWithWebIdentity.

Here’s how to change the policy for Luna 0.6.7:

                 "ec2:DescribeKeyPairs",
                 "ec2:DescribeSecurityGroups",
                 "iam:PassRole",
-                "iam:GetInstanceProfile"
+                "iam:GetInstanceProfile",
+                "ssm:GetParameter"
             ],
             "Resource": "*"
         },