Add additional EC2 permissions to CloudCredential request
@@ -15,17 +15,18 @@ spec:
statementEntries:
- effect: Allow
action:
- - ec2:DescribeImages
- - ec2:DescribeVpcs
- - ec2:DescribeSubnets
+ - ec2:CreateTags
- ec2:DescribeAvailabilityZones
+ - ec2:DescribeImages
+ - ec2:DescribeInstances
- ec2:DescribeSecurityGroups
+ - ec2:DescribeSubnets
+ - ec2:DescribeVpcs
- ec2:RunInstances
- - ec2:DescribeInstances
- ec2:TerminateInstances
- - elasticloadbalancing:RegisterInstancesWithLoadBalancer
- elasticloadbalancing:DescribeLoadBalancers
- elasticloadbalancing:DescribeTargetGroups
+ - elasticloadbalancing:RegisterInstancesWithLoadBalancer
- elasticloadbalancing:RegisterTargets
- iam:PassRole
resource: "*"
