Skip to content

Commit 9e3eb35

Browse files
committed
Add eks:DescribeNodegroup to cluster_autoscaler_policy
1 parent beca905 commit 9e3eb35

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

customer-managed/aws/terraform/iam_utility_node_group.tf

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,10 +13,21 @@ data "aws_iam_policy_document" "cluster_autoscaler_policy" {
1313
# https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html
1414
"ec2:DescribeInstanceTypes",
1515
"ec2:DescribeLaunchTemplateVersions",
16+
1617
]
1718
resources = ["*"]
1819
}
1920

21+
statement {
22+
effect = "Allow"
23+
actions = [
24+
"eks:DescribeNodegroup"
25+
]
26+
resources = [
27+
"arn:aws:eks:*:${local.aws_account_id}:nodegroup/redpanda-*"
28+
]
29+
}
30+
2031
statement {
2132
effect = "Allow"
2233
actions = [

0 commit comments

Comments
 (0)