From 3ecc382c3c518231220132c80f36a7683a29d649 Mon Sep 17 00:00:00 2001
From: Oscar Boher <oscar.boher@scopely.com>
Date: Thu, 9 Oct 2025 11:56:53 +0200
Subject: [PATCH] feature/Add ListInstanceProfiles permission to IAM policy

For Karpenter 1.7.0+ onwards this is required:
https://karpenter.sh/docs/upgrading/upgrade-guide/#upgrading-to-170
---
 main.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/main.tf b/main.tf
index d324bd30..d7cc314e 100644
--- a/main.tf
+++ b/main.tf
@@ -2948,6 +2948,7 @@ data "aws_iam_policy_document" "karpenter" {
         "iam:GetInstanceProfile",
         "iam:RemoveRoleFromInstanceProfile",
         "iam:TagInstanceProfile",
+        "iam:ListInstanceProfiles",
       ]
       resources = ["*"]
     }