From 85955a1d6d9deba8e9c2f237f2dcc731bafaeb45 Mon Sep 17 00:00:00 2001 From: Gregory Vander Schueren Date: Thu, 25 Aug 2022 17:46:45 +0200 Subject: [PATCH] Update IAM policy in AWS doc Without this permission, you get the following error: Failed to regenerate ASG cache: cannot autodiscover ASGs: AccessDenied: User: is not authorized to perform: autoscaling:DescribeTags because no identity-based policy allows the autoscaling:DescribeTags action. This is also mentionned by AWS doc: https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html --- cluster-autoscaler/cloudprovider/aws/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/cluster-autoscaler/cloudprovider/aws/README.md b/cluster-autoscaler/cloudprovider/aws/README.md index e56f4cadaad2..773eadbf9f6c 100644 --- a/cluster-autoscaler/cloudprovider/aws/README.md +++ b/cluster-autoscaler/cloudprovider/aws/README.md @@ -47,6 +47,7 @@ should be updated to restrict the resources/add conditionals: "autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingInstances", "autoscaling:DescribeLaunchConfigurations", + "autoscaling:DescribeTags", "ec2:DescribeInstanceTypes", "ec2:DescribeLaunchTemplateVersions" ],