chore: Drop ec2:DescribeAvailabilityZones permissions (#6932)

aws · Sep 5, 2024 · b56e044 · b56e044
1 parent 73d1a1f
commit b56e044
Show file tree

Hide file tree

Showing 15 changed files with 0 additions and 15 deletions.
diff --git a/website/content/en/docs/getting-started/getting-started-with-karpenter/cloudformation.yaml b/website/content/en/docs/getting-started/getting-started-with-karpenter/cloudformation.yaml
@@ -167,7 +167,6 @@ Resources:
               "Effect": "Allow",
               "Resource": "*",
               "Action": [
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DescribeImages",
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypeOfferings",

diff --git a/website/content/en/docs/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh b/website/content/en/docs/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh
@@ -36,7 +36,6 @@ cat << EOF > controller-policy.json
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypes",
                 "ec2:DescribeInstanceTypeOfferings",
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DeleteLaunchTemplate",
                 "ec2:CreateTags",
                 "ec2:CreateLaunchTemplate",

diff --git a/website/content/en/docs/reference/cloudformation.md b/website/content/en/docs/reference/cloudformation.md
@@ -298,7 +298,6 @@ This allows the Karpenter controller to do any of those read-only actions across
   "Effect": "Allow",
   "Resource": "*",
   "Action": [
-    "ec2:DescribeAvailabilityZones",
     "ec2:DescribeImages",
     "ec2:DescribeInstances",
     "ec2:DescribeInstanceTypeOfferings",

diff --git a/...ite/content/en/preview/getting-started/getting-started-with-karpenter/cloudformation.yaml b/...ite/content/en/preview/getting-started/getting-started-with-karpenter/cloudformation.yaml
@@ -167,7 +167,6 @@ Resources:
               "Effect": "Allow",
               "Resource": "*",
               "Action": [
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DescribeImages",
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypeOfferings",

diff --git a/...te/content/en/preview/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh b/...te/content/en/preview/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh
@@ -36,7 +36,6 @@ cat << EOF > controller-policy.json
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypes",
                 "ec2:DescribeInstanceTypeOfferings",
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DeleteLaunchTemplate",
                 "ec2:CreateTags",
                 "ec2:CreateLaunchTemplate",

diff --git a/website/content/en/preview/reference/cloudformation.md b/website/content/en/preview/reference/cloudformation.md
@@ -298,7 +298,6 @@ This allows the Karpenter controller to do any of those read-only actions across
   "Effect": "Allow",
   "Resource": "*",
   "Action": [
-    "ec2:DescribeAvailabilityZones",
     "ec2:DescribeImages",
     "ec2:DescribeInstances",
     "ec2:DescribeInstanceTypeOfferings",

diff --git a/website/content/en/v0.36/getting-started/getting-started-with-karpenter/cloudformation.yaml b/website/content/en/v0.36/getting-started/getting-started-with-karpenter/cloudformation.yaml
@@ -161,7 +161,6 @@ Resources:
               "Effect": "Allow",
               "Resource": "*",
               "Action": [
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DescribeImages",
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypeOfferings",

diff --git a/website/content/en/v0.36/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh b/website/content/en/v0.36/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh
@@ -36,7 +36,6 @@ cat << EOF > controller-policy.json
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypes",
                 "ec2:DescribeInstanceTypeOfferings",
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DeleteLaunchTemplate",
                 "ec2:CreateTags",
                 "ec2:CreateLaunchTemplate",

diff --git a/website/content/en/v0.36/reference/cloudformation.md b/website/content/en/v0.36/reference/cloudformation.md
@@ -290,7 +290,6 @@ This allows the Karpenter controller to do any of those read-only actions across
   "Effect": "Allow",
   "Resource": "*",
   "Action": [
-    "ec2:DescribeAvailabilityZones",
     "ec2:DescribeImages",
     "ec2:DescribeInstances",
     "ec2:DescribeInstanceTypeOfferings",

diff --git a/website/content/en/v0.37/getting-started/getting-started-with-karpenter/cloudformation.yaml b/website/content/en/v0.37/getting-started/getting-started-with-karpenter/cloudformation.yaml
@@ -161,7 +161,6 @@ Resources:
               "Effect": "Allow",
               "Resource": "*",
               "Action": [
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DescribeImages",
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypeOfferings",

diff --git a/website/content/en/v0.37/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh b/website/content/en/v0.37/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh
@@ -36,7 +36,6 @@ cat << EOF > controller-policy.json
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypes",
                 "ec2:DescribeInstanceTypeOfferings",
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DeleteLaunchTemplate",
                 "ec2:CreateTags",
                 "ec2:CreateLaunchTemplate",

diff --git a/website/content/en/v0.37/reference/cloudformation.md b/website/content/en/v0.37/reference/cloudformation.md
@@ -290,7 +290,6 @@ This allows the Karpenter controller to do any of those read-only actions across
   "Effect": "Allow",
   "Resource": "*",
   "Action": [
-    "ec2:DescribeAvailabilityZones",
     "ec2:DescribeImages",
     "ec2:DescribeInstances",
     "ec2:DescribeInstanceTypeOfferings",

diff --git a/website/content/en/v1.0/getting-started/getting-started-with-karpenter/cloudformation.yaml b/website/content/en/v1.0/getting-started/getting-started-with-karpenter/cloudformation.yaml
@@ -167,7 +167,6 @@ Resources:
               "Effect": "Allow",
               "Resource": "*",
               "Action": [
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DescribeImages",
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypeOfferings",

diff --git a/website/content/en/v1.0/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh b/website/content/en/v1.0/getting-started/migrating-from-cas/scripts/step04-controller-iam.sh
@@ -36,7 +36,6 @@ cat << EOF > controller-policy.json
                 "ec2:DescribeInstances",
                 "ec2:DescribeInstanceTypes",
                 "ec2:DescribeInstanceTypeOfferings",
-                "ec2:DescribeAvailabilityZones",
                 "ec2:DeleteLaunchTemplate",
                 "ec2:CreateTags",
                 "ec2:CreateLaunchTemplate",

diff --git a/website/content/en/v1.0/reference/cloudformation.md b/website/content/en/v1.0/reference/cloudformation.md
@@ -298,7 +298,6 @@ This allows the Karpenter controller to do any of those read-only actions across
   "Effect": "Allow",
   "Resource": "*",
   "Action": [
-    "ec2:DescribeAvailabilityZones",
     "ec2:DescribeImages",
     "ec2:DescribeInstances",
     "ec2:DescribeInstanceTypeOfferings",