Add iam:GetOpenIDConnectProvider grant to docs/iam-permissions.md

[danielelisi]

PR o'clock

Description

The suggested policy in iam-permissions.md is missing to include the iam:GetOpenIDConnectProvider permission hence Terraform plan fails to complete with the error:

AccessDenied: User: arn:aws:sts::<redacted>:assumed-role/<iam_role>/ is not authorized to perform: iam:GetOpenIDConnectProvider on resource: arn:aws:iam::<redacted>:oidc-provider/oidc.eks.ap-southeast-2.amazonaws.com/

After including this permission Terraform completes running the plan

Checklist

• Change added to CHANGELOG.md. All changes must be added and breaking changes and highlighted
• CI tests are passing
• README.md has been updated after any changes to variables and outputs. See https://github.com/terraform-aws-modules/terraform-aws-eks/#doc-generation

[max-rocket-internet]

Thanks but also please update the changelog 🙂

[danielelisi]

Thanks but also please update the changelog

Sounds good! I added the change to CHANGELOG.md

[max-rocket-internet]

Thanks @danielelisi 💙

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.