feat: Add capacity reservation permissions to Karpenter IAM policy (#3318)

mattholmes15 · web-flow · commit 770ee99d9c4b · 2025-03-07T07:31:19.000-06:00
feat: Update AllowScopedEC2InstanceAccessActions policy to include capacity-reservation permission as part of Karpenter version 1.3.0
diff --git a/modules/karpenter/policy.tf b/modules/karpenter/policy.tf
@@ -361,6 +361,7 @@ data "aws_iam_policy_document" "v1" {
       "arn:${local.partition}:ec2:${local.region}::snapshot/*",
       "arn:${local.partition}:ec2:${local.region}:*:security-group/*",
       "arn:${local.partition}:ec2:${local.region}:*:subnet/*",
+      "arn:${local.partition}:ec2:${local.region}:*:capacity-reservation/*",
     ]
 
     actions = [

Original file line number	Diff line number	Diff line change
`@@ -361,6 +361,7 @@ data "aws_iam_policy_document" "v1" {`
`361`	`361`	`"arn:${local.partition}:ec2:${local.region}::snapshot/*",`
`362`	`362`	`"arn:${local.partition}:ec2:${local.region}::security-group/",`
`363`	`363`	`"arn:${local.partition}:ec2:${local.region}::subnet/",`
	`364`	`+ "arn:${local.partition}:ec2:${local.region}::capacity-reservation/",`
`364`	`365`	`]`
`365`	`366`
`366`	`367`	`actions = [`