feat: Add auto discovery permission of cluster endpoint to Karpenter …

…role (#2451) Co-authored-by: Bryant Biggs <[email protected]>
terraform-aws-modules · Feb 15, 2023 · c4a4b8a · c4a4b8a
1 parent 07653b6
commit c4a4b8a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/modules/karpenter/main.tf b/modules/karpenter/main.tf
@@ -131,6 +131,11 @@ data "aws_iam_policy_document" "irsa" {
  resources = var.irsa_ssm_parameter_arns
  }
 
+ statement {
+ actions = ["eks:DescribeCluster"]
+ resources = ["arn:${local.partition}:eks:*:${local.account_id}:cluster/${var.cluster_name}"]
+ }
+
  statement {
  actions = ["iam:PassRole"]
  resources = [var.create_iam_role ? aws_iam_role.this[0].arn : var.iam_role_arn]