feat: Add auto discovery permission of cluster endpoint to Karpenter …

…role (#2451) Co-authored-by: Bryant Biggs <[email protected]>
terraform-aws-modules · Feb 15, 2023 · c4a4b8a · c4a4b8a
1 parent 07653b6
commit c4a4b8a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/modules/karpenter/main.tf b/modules/karpenter/main.tf
@@ -131,6 +131,11 @@ data "aws_iam_policy_document" "irsa" {
     resources = var.irsa_ssm_parameter_arns
   }
 
+  statement {
+    actions   = ["eks:DescribeCluster"]
+    resources = ["arn:${local.partition}:eks:*:${local.account_id}:cluster/${var.cluster_name}"]
+  }
+
   statement {
     actions   = ["iam:PassRole"]
     resources = [var.create_iam_role ? aws_iam_role.this[0].arn : var.iam_role_arn]