From c903e55817ce20d3b35120e29736fd1eb138a783 Mon Sep 17 00:00:00 2001 From: olamide005 Date: Mon, 6 Mar 2023 15:53:09 -0600 Subject: [PATCH] Adding New IAM Policy for Cluster Autoscaler --- terraform-modules/aws/cluster-autoscaler/main.tf | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/terraform-modules/aws/cluster-autoscaler/main.tf b/terraform-modules/aws/cluster-autoscaler/main.tf index 89cd3518f..da4923aaa 100644 --- a/terraform-modules/aws/cluster-autoscaler/main.tf +++ b/terraform-modules/aws/cluster-autoscaler/main.tf @@ -23,7 +23,9 @@ data "aws_iam_policy_document" "cluster_autoscaler" { "autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingInstances", "autoscaling:DescribeLaunchConfigurations", + "autoscaling:DescribeScalingActivities", "autoscaling:DescribeTags", + "ec2:DescribeInstanceTypes", "ec2:DescribeLaunchTemplateVersions", ] @@ -38,6 +40,9 @@ data "aws_iam_policy_document" "cluster_autoscaler" { "autoscaling:SetDesiredCapacity", "autoscaling:TerminateInstanceInAutoScalingGroup", "autoscaling:UpdateAutoScalingGroup", + "ec2:DescribeImages", + "ec2:GetInstanceTypesFromInstanceRequirements", + "eks:DescribeNodegroup" ] resources = ["*"]