fix: update IAM policy to match the latest version for Karpenter v0.33.0

adds permissions for AllowScopedEC2InstanceActionsWithTags and AllowScopedEC2InstanceActions for spot
aws-samples · Dec 19, 2023 · 2a45cf5 · 2a45cf5
1 parent 9691d66
commit 2a45cf5
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/index.ts b/src/index.ts
@@ -502,6 +502,7 @@ export class Karpenter extends Construct {
         `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:volume/*`,
         `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:network-interface/*`,
         `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:launch-template/*`,
+        `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:spot-instances-request/*`,
       ],
       actions: [
         'ec2:RunInstances',
@@ -534,6 +535,7 @@ export class Karpenter extends Construct {
         `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:volume/*`,
         `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:network-interface/*`,
         `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:launch-template/*`,
+        `arn:${Aws.PARTITION}:ec2:${Aws.REGION}:*:spot-instances-request/*`,
       ],
       actions: ['ec2:CreateTags'],
       conditions: {