feat: Add auto discovery permission of endpoint to karpenter role (#1417

) Co-authored-by: Bryant Biggs <[email protected]>
aws-ia · Feb 11, 2023 · 05da30c · 05da30c
1 parent 0d8c548
commit 05da30c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/modules/kubernetes-addons/karpenter/data.tf b/modules/kubernetes-addons/karpenter/data.tf
@@ -70,6 +70,11 @@ data "aws_iam_policy_document" "karpenter" {
     ]
   }
 
+  statement {
+    actions   = ["eks:DescribeCluster"]
+    resources = ["arn:${var.addon_context.aws_partition_id}:eks:*:${var.addon_context.aws_caller_identity_account_id}:cluster/${var.addon_context.eks_cluster_id}"]
+  }
+
   statement {
     sid       = "ConditionalEC2Termination"
     effect    = "Allow"