Add comment to remove unused IAM permissions in the future

This commit is contained in:
Peter Rifel 2024-01-03 21:19:05 -06:00
parent 85da9fb918
commit 349de70cda
No known key found for this signature in database
1 changed files with 3 additions and 0 deletions

View File

@ -1116,6 +1116,9 @@ func addASLifecyclePolicies(p *Policy, enableHookSupport bool) {
"autoscaling:DescribeLifecycleHooks",
)
}
// TODO: remove this after k8s 1.29 support is removed
// It is no longer needed as of kops 1.29 but to prevent node bootstrap issues
// during kops upgrades we keep the permission until it is guaranteed to not be needed.
p.unconditionalAction.Insert(
"autoscaling:DescribeAutoScalingInstances",
)