Add eks:DescribeNodegroup to cluster_autoscaler_policy

[tomasz-sadura]

No description provided.

[frenchfrywpepper]

Instead of adding this here can we separate it out and only allow for particular nodegroup resources? We're aiming for least privilege.

  statement {
    effect = "Allow"
    actions = [
      "eks:DescribeNodegroup"
    ]
    resources = [
      "arn:aws:eks:*:${local.aws_account_id}:nodegroup/redpanda-*"
    ]
  }