diff --git a/config/clusters/iam.tf b/config/clusters/iam.tf index 9d89739df3..12eceb77d9 100644 --- a/config/clusters/iam.tf +++ b/config/clusters/iam.tf @@ -35,14 +35,27 @@ data "aws_iam_policy_document" "cluster_autoscaler_policy_doc" { statement { effect = "Allow" resources = ["*"] + actions = [ "autoscaling:DescribeAutoScalingGroups", "autoscaling:DescribeAutoScalingInstances", "autoscaling:DescribeLaunchConfigurations", - "autoscaling:DescribeTags", + "autoscaling:DescribeScalingActivities", + "ec2:DescribeImages", + "ec2:DescribeInstanceTypes", + "ec2:DescribeLaunchTemplateVersions", + "ec2:GetInstanceTypesFromInstanceRequirements", + "eks:DescribeNodegroup", + ] + } + + statement { + effect = "Allow" + resources = ["*"] + + actions = [ "autoscaling:SetDesiredCapacity", "autoscaling:TerminateInstanceInAutoScalingGroup", - "ec2:DescribeLaunchTemplateVersions" ] } }