fix: Sync Karpenter IAM permissions with upstream (#3517)

erezzarum · web-flow · commit c8bb152839c4 · 2025-09-16T12:14:18.000-05:00
Sync Karpenter IAM permissions with upstream

Signed-off-by: Erez Zarum &lt;erezz@amazon.com&gt;
diff --git a/modules/karpenter/policy.tf b/modules/karpenter/policy.tf
@@ -181,6 +181,7 @@ data "aws_iam_policy_document" "controller" {
     sid       = "AllowRegionalReadActions"
     resources = ["*"]
     actions = [
+      "ec2:DescribeCapacityReservations",
       "ec2:DescribeAvailabilityZones",
       "ec2:DescribeImages",
       "ec2:DescribeInstances",
