From fb979aa582abd981b2b10aaf030f02a69f7d4b07 Mon Sep 17 00:00:00 2001
From: Mikkel Oscar Lyderik Larsen <mikkeloscar@users.noreply.github.com>
Date: Fri, 23 Feb 2018 10:53:54 +0100
Subject: [PATCH] Document needed IAM role
 autoscaling:DescribeLoadBalancerTargetGroups (#131)

---
 deploy/kops.md         | 2 ++
 deploy/requirements.md | 5 +++++
 2 files changed, 7 insertions(+)

diff --git a/deploy/kops.md b/deploy/kops.md
index 7480d529..535d9a3d 100644
--- a/deploy/kops.md
+++ b/deploy/kops.md
@@ -62,6 +62,7 @@ kube-ingress-aws-controller, which we will use:
     "autoscaling:DetachLoadBalancers",
     "autoscaling:DetachLoadBalancerTargetGroups",
     "autoscaling:AttachLoadBalancerTargetGroups",
+    "autoscaling:DescribeLoadBalancerTargetGroups",
     "cloudformation:*",
     "elasticloadbalancing:*",
     "elasticloadbalancingv2:*",
@@ -101,6 +102,7 @@ and add this to your node policy:
             "autoscaling:DetachLoadBalancers",
             "autoscaling:DetachLoadBalancerTargetGroups",
             "autoscaling:AttachLoadBalancerTargetGroups",
+            "autoscaling:DescribeLoadBalancerTargetGroups",
             "cloudformation:*",
             "elasticloadbalancing:*",
             "elasticloadbalancingv2:*",
diff --git a/deploy/requirements.md b/deploy/requirements.md
index 70238b46..5f472ad0 100644
--- a/deploy/requirements.md
+++ b/deploy/requirements.md
@@ -53,6 +53,11 @@ Please also note that the worker nodes will need the right permission to describ
     "Resource": "*",
     "Effect": "Allow"
 },
+{
+    "Action": "autoscaling:DescribeLoadBalancerTargetGroups",
+    "Resource": "*",
+    "Effect": "Allow"
+},
 {
     "Action": "elasticloadbalancing:DescribeLoadBalancers",
     "Resource": "*",