Merge pull request #9341 from mtulio/OCPBUGS-46596

OCPBUGS-46596: aws/permissions - defaults ec2:DescribeInstanceTypeOfferings
openshift · Jan 18, 2025 · ec249ae · ec249ae
2 parents cdd054f + 821b07b
commit ec249ae
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/pkg/asset/installconfig/aws/permissions.go b/pkg/asset/installconfig/aws/permissions.go
@@ -109,6 +109,7 @@ var permissions = map[PermissionGroup][]string{
 		"ec2:DescribeInstanceAttribute",
 		"ec2:DescribeInstanceCreditSpecifications",
 		"ec2:DescribeInstances",
+		"ec2:DescribeInstanceTypeOfferings", // Needed to filter zones by instance type
 		"ec2:DescribeInternetGateways",
 		"ec2:DescribeKeyPairs",
 		"ec2:DescribeNatGateways",
@@ -337,8 +338,6 @@ var permissions = map[PermissionGroup][]string{
 	PermissionDefaultZones: {
 		// Needed to list the zones available in the region
 		"ec2:DescribeAvailabilityZones",
-		// Needed to filter zones by instance type
-		"ec2:DescribeInstanceTypeOfferings",
 	},
 	PermissionAssumeRole: {
 		// Needed so the installer can use the provided custom IAM role