feat: Add permissions for instance requirements support for cluster autoscaler IRSA policy (#356)

pen-pal · web-flow · commit fac0cdcc714e · 2023-03-27T07:50:53.000-04:00
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -62,6 +62,8 @@ data "aws_iam_policy_document" "cluster_autoscaler" {
       "ec2:DescribeLaunchTemplateVersions",
       "ec2:DescribeInstanceTypes",
       "eks:DescribeNodegroup",
+      "ec2:DescribeImages",
+      "ec2:GetInstanceTypesFromInstanceRequirements"
     ]
 
     resources = ["*"]

Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,8 @@ data "aws_iam_policy_document" "cluster_autoscaler" {`
`62`	`62`	`"ec2:DescribeLaunchTemplateVersions",`
`63`	`63`	`"ec2:DescribeInstanceTypes",`
`64`	`64`	`"eks:DescribeNodegroup",`
	`65`	`+ "ec2:DescribeImages",`
	`66`	`+ "ec2:GetInstanceTypesFromInstanceRequirements"`
`65`	`67`	`]`
`66`	`68`
`67`	`69`	`resources = ["*"]`