Permissions required to run the login nodes pool
In order to manage the login nodes pool the cluster administrator must have the following additional permissions:
- Action: - iam:CreateServiceLinkedRole - autoscaling:DeleteAutoScalingGroup - autoscaling:DeleteLifecycleHook - autoscaling:Describe* - autoscaling:PutLifecycleHook - autoscaling:UpdateAutoScalingGroup - elasticloadbalancing:CreateListener - elasticloadbalancing:CreateTargetGroup - elasticloadbalancing:DeleteListener - elasticloadbalancing:DeleteLoadBalancer - elasticloadbalancing:DeleteTargetGroup - elasticloadbalancing:Describe* - elasticloadbalancing:ModifyLoadBalancerAttributes Resource: '*' Condition: ForAllValues:StringEquals: aws:TagKeys: [ "parallelcluster:cluster-name" ] - Action: - autoscaling:CreateAutoScalingGroup - autoscaling:DeleteTags - autoscaling:CreateOrUpdateTags - elasticloadbalancing:AddTags - elasticloadbalancing:CreateLoadBalancer - elasticloadbalancing:RemoveTags - elasticloadbalancing:ModifyTargetGroup Resource: '*' Effect: Allow