Merge pull request #298 from skang0601/fix-cluster-autoscaler-role-for-launch-templates

brandonjbjelland · web-flow · commit d02bbc5e1e44 · 2019-03-07T10:31:35.000-08:00
add ec2:DescribeLaunchTemplateVersions action to worker node iam role
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,6 +11,7 @@ project adheres to [Semantic Versioning](http://semver.org/).
 
 ### Added
 
+- Added "ec2:DescribeLaunchTemplateVersions" action to worker instance role (by @skang0601)
 - Adding ebs encryption for workers launched using workers_launch_template (by @russki)
 - Added output for generated kubeconfig filename (by @syst0m)
 - Added outputs for cluster role ARN and name (by @spingel)
diff --git a/workers.tf b/workers.tf
@@ -173,6 +173,7 @@ data "aws_iam_policy_document" "worker_autoscaling" {
       "autoscaling:DescribeAutoScalingInstances",
       "autoscaling:DescribeLaunchConfigurations",
       "autoscaling:DescribeTags",
+      "ec2:DescribeLaunchTemplateVersions",
     ]
 
     resources = ["*"]

Original file line number	Diff line number	Diff line change
`@@ -173,6 +173,7 @@ data "aws_iam_policy_document" "worker_autoscaling" {`
`173`	`173`	`"autoscaling:DescribeAutoScalingInstances",`
`174`	`174`	`"autoscaling:DescribeLaunchConfigurations",`
`175`	`175`	`"autoscaling:DescribeTags",`
	`176`	`+ "ec2:DescribeLaunchTemplateVersions",`
`176`	`177`	`]`
`177`	`178`
`178`	`179`	`resources = ["*"]`