v0.8
- Added
iam:UpdateAssumeRolePolicy
to instance-profile resources- Required for Union's Karpenter migration. Karpenter directly manages to attach roles to the EC2 instances. This change adds permissions to Karpenter-managed EC2 instances to assume Karpenter-managed roles.
- Added permissions for creating SQS queues and EventBridge rules to be used by Karpenter
- Required to support the Karpenter feature to monitor AWS reclaiming spot instance capacity and node termination.
iam:CreatePolicyVersion
andiam:DeletePolicyVersion'
to modify existing Union IAM policiesec2:DescribeInstanceTypes
,servicequotas:GetServiceQuota'
,cloudwatch:GetMetricStatistics
to check cluster state before release of changes.- Union is introducing pre-deploy infrastructure checks to ensure accounts have sufficient quota for the desired cluster configuration.
ec2:*VpcEndpoints
to reduce NatGateway traffic and reduce subsequent costs- Introduce VpcEndpoints for AWS services to reduce internet-bound traffic through NAT Gateways. Thus, reducing NAT gateway costs.
Additionally, accessible at https://union-public.s3.amazonaws.com/templates/v0.8/union-ai-admin-role.template.yaml