Document needed IAM role autoscaling:DescribeLoadBalancerTargetGroups (…

…#131)
zalando-incubator · Feb 23, 2018 · fb979aa · fb979aa
1 parent a483778
commit fb979aa
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/deploy/kops.md b/deploy/kops.md
@@ -62,6 +62,7 @@ kube-ingress-aws-controller, which we will use:
     "autoscaling:DetachLoadBalancers",
     "autoscaling:DetachLoadBalancerTargetGroups",
     "autoscaling:AttachLoadBalancerTargetGroups",
+    "autoscaling:DescribeLoadBalancerTargetGroups",
     "cloudformation:*",
     "elasticloadbalancing:*",
     "elasticloadbalancingv2:*",
@@ -101,6 +102,7 @@ and add this to your node policy:
             "autoscaling:DetachLoadBalancers",
             "autoscaling:DetachLoadBalancerTargetGroups",
             "autoscaling:AttachLoadBalancerTargetGroups",
+            "autoscaling:DescribeLoadBalancerTargetGroups",
             "cloudformation:*",
             "elasticloadbalancing:*",
             "elasticloadbalancingv2:*",

diff --git a/deploy/requirements.md b/deploy/requirements.md
@@ -53,6 +53,11 @@ Please also note that the worker nodes will need the right permission to describ
     "Resource": "*",
     "Effect": "Allow"
 },
+{
+    "Action": "autoscaling:DescribeLoadBalancerTargetGroups",
+    "Resource": "*",
+    "Effect": "Allow"
+},
 {
     "Action": "elasticloadbalancing:DescribeLoadBalancers",
     "Resource": "*",