OCPBUGS-46596: aws/permissions - added ec2:DescribeInstanceTypeOfferi…

…ngs by default create
openshift · Jan 2, 2025 · a55de52 · a55de52
1 parent ec72ce6
commit a55de52
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/pkg/asset/installconfig/aws/permissions.go b/pkg/asset/installconfig/aws/permissions.go
@@ -105,6 +105,7 @@ var permissions = map[PermissionGroup][]string{
 		"ec2:DescribeInstanceAttribute",
 		"ec2:DescribeInstanceCreditSpecifications",
 		"ec2:DescribeInstances",
+		"ec2:DescribeInstanceTypeOfferings", // Needed to filter zones by instance type
 		"ec2:DescribeInternetGateways",
 		"ec2:DescribeKeyPairs",
 		"ec2:DescribeNatGateways",
@@ -333,8 +334,6 @@ var permissions = map[PermissionGroup][]string{
 	PermissionDefaultZones: {
 		// Needed to list the zones available in the region
 		"ec2:DescribeAvailabilityZones",
-		// Needed to filter zones by instance type
-		"ec2:DescribeInstanceTypeOfferings",
 	},
 	PermissionAssumeRole: {
 		// Needed so the installer can use the provided custom IAM role