The api gateway controller addon lacks permissions to create httproutes as it currently throwing up errors

[neelaruban]

Description

The api gateway controller addon lacks permissions to create httproutes as it currently throwing up errors

{"level":"debug","ts":"2023-12-06T23:49:12.024Z","logger":"controller.route","caller":"lattice/target_group_synthesizer.go:81","msg":"Failed TargetGroupManager.Upsert k8s-default-parking due to AccessDeniedException: User: arn:aws:sts::331334982285:assumed-role/aws-gateway-api-controller-20231206231429634800000015/1701904568794509513 is not authorized to perform: tag:GetResources because no identity-based policy allows the tag:GetResources action\n\tstatus code: 400, request id: 884a076d-a781-49e3-8404-7236d80533bd"}
{"level":"debug","ts":"2023-12-06T23:49:12.102Z","logger":"cloud","caller":"aws/cloud.go:58","msg":"error","error":"AccessDeniedException: User: arn:aws:sts::331334982285:assumed-role/aws-gateway-api-controller-20231206231429634800000015/1701904568794509513 is not authorized to perform: tag:GetResources because no identity-based policy allows the tag:GetResources action\n\tstatus code: 400, request id: 91f30cbb-00f1-4e8f-b0ca-1de568aa0f2a","serviceName":"tagging","operation":"GetResources","params":"{\n  ResourceTypeFilters: [\"vpc-lattice:targetgroup\"],\n  TagFilters: [\n    {\n      Key: \"application-networking.k8s.aws/ServiceNamespace\",\n      Values: [\"default\"]\n    },\n    {\n      Key: \"application-networking.k8s.aws/SourceTypeKey\",\n      Values: [\"HTTPRoute\"]\n    },\n    {\n      Key: \"application-networking.k8s.aws/ProtocolVersion\",\n      Values: [\"HTTP1\"]\n    },\n    {\n      Key: \"application-networking.k8s.aws/RouteName\",\n      Values: [\"rates\"]\n    },\n    {\n      Key: \"application-networking.k8s.aws/RouteNamespace\",\n      Values: [\"default\"]\n    },\n    {\n      Key: \"application-networking.k8s.aws/ClusterName\",\n      Values: [\"cluster1\"]\n    },\n    {\n      Key: \"a

as it turns out that it lacks few more permissions to do its job as deduced from the official documentation

If your request is for a new feature, please use the Feature request template.

• ✋ I have searched the open/closed issues and my issue is not listed.

⚠️ Note

Before you submit an issue, please perform the following first:

1. Remove the local .terraform directory (! ONLY if state is stored remotely, which hopefully you are following that best practice!): rm -rf .terraform/
2. Re-initialize the project root to pull down modules: terraform init
3. Re-attempt your terraform plan or apply and check if the issue still persists

Versions

• Module version [Required]:

• Terraform version:

• Provider version(s):

Reproduction Code [Required]

Steps to reproduce the behavior:

Expected behaviour

Actual behaviour

Terminal Output Screenshot(s)

Additional context