fix: Sync Karpenter IAM permissions with upstream (#3517)

Sync Karpenter IAM permissions with upstream Signed-off-by: Erez Zarum <erezz@amazon.com>
SCT-Engineering · Sep 16, 2025 · c8bb152 · c8bb152
1 parent 0b29f2b
commit c8bb152
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/karpenter/policy.tf b/modules/karpenter/policy.tf
@@ -181,6 +181,7 @@ data "aws_iam_policy_document" "controller" {
     sid       = "AllowRegionalReadActions"
     resources = ["*"]
     actions = [
+      "ec2:DescribeCapacityReservations",
       "ec2:DescribeAvailabilityZones",
       "ec2:DescribeImages",
       "ec2:DescribeInstances",