module iam-role-for-service-accounts-eks missing required policy

[ShyWiz]

Description

Need to add missing permission to the IAM policy generated in the module iam-role-for-service-accounts-eks.

Permission denied error from AWS cluster-autoscaler.

aws_cloud_provider.go:369] Failed to generate AWS EC2 Instance Types: UnauthorizedOperation: You are not authorized to perform this operation.
        status code: 403

Turns out this action was added to the autoscaler readme required permissions which is referenced by this module's policies.tf file but needs to be updated. This required permission was added to that readme in December.

Versions

• Terraform module iam-role-for-service-accounts-eks v4.13.1
• Helm chart for cluster-autoscaler version: 9.16.0

[bryantbiggs]

hmm, we patched this but it looks like the CI didn't trigger the release

terraform-aws-iam/modules/iam-role-for-service-accounts-eks/policies.tf

Line 23 in 0ac7f4d

"ec2:DescribeInstanceTypes",

[DanielTeraSky]

@bryantbiggs It looks like the semantic-release/commit-analyzer didn't trigger the release as the commit message didn't contain fix/feat

[bryantbiggs]

ah good point, I've got a no-op PR opened that should trigger the release workflow so the patch fix is released this time

[antonbabenko]

This issue has been resolved in version 4.13.2 🎉

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.