feat: Add additional permission for karpenter IAM policy added in v0.14.0 release (terraform-aws-modules#264)

bryantbiggs · web-flow · commit bce17b240f79 · 2022-08-10T15:50:09.000-04:00
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.72.2
+    rev: v1.74.1
     hooks:
       - id: terraform_fmt
       - id: terraform_validate
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -523,6 +523,7 @@ data "aws_iam_policy_document" "karpenter_controller" {
       "ec2:CreateFleet",
       "ec2:CreateTags",
       "ec2:DescribeLaunchTemplates",
+      "ec2:DescribeImages",
       "ec2:DescribeInstances",
       "ec2:DescribeSecurityGroups",
       "ec2:DescribeSubnets",
