Skip to content

Commit d3dadf1

Browse files
committed
OCPBUGS-25440: ic: aws: add iam:TagInstanceProfile permission
requirement Since #7510, IPI installs fail if the permission is missing: ``` level=error msg=Error: creating IAM Instance Profile (ci-op-4hw2rz1v-49c30-zt9vx-worker-profile): AccessDenied: User: arn:aws:iam::301721915996:user/ci-op-4hw2rz1v-49c30-minimal-perm is not authorized to perform: iam:TagInstanceProfile on resource: arn:aws:iam::301721915996:instance-profile/ci-op-4hw2rz1v-49c30-zt9vx-worker-profile because no identity-based policy allows the iam:TagInstanceProfile action ```
1 parent 31504ce commit d3dadf1

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

pkg/asset/installconfig/aws/permissions.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -136,6 +136,7 @@ var permissions = map[PermissionGroup][]string{
136136
"iam:PutRolePolicy",
137137
"iam:RemoveRoleFromInstanceProfile",
138138
"iam:SimulatePrincipalPolicy",
139+
"iam:TagInstanceProfile",
139140
"iam:TagRole",
140141

141142
// Route53 related perms

0 commit comments

Comments
 (0)