Add DescribeRouteTables to load balancer controller permissions (#8447)

NicholasBlaskey · web-flow · commit 983783aff7bf · 2025-07-17T12:32:13.000-07:00
diff --git a/pkg/cfn/builder/iam_test.go b/pkg/cfn/builder/iam_test.go
@@ -501,6 +501,7 @@ const expectedAWSLoadBalancerControllerPolicyDocument = `{
         "ec2:DescribeCoipPools",
         "ec2:GetSecurityGroupsForVpc",
         "ec2:DescribeIpamPools",
+        "ec2:DescribeRouteTables",
         "elasticloadbalancing:DescribeLoadBalancers",
         "elasticloadbalancing:DescribeLoadBalancerAttributes",
         "elasticloadbalancing:DescribeListeners",
diff --git a/pkg/cfn/builder/statement.go b/pkg/cfn/builder/statement.go
@@ -41,6 +41,7 @@ func loadBalancerControllerStatements() []cft.MapOfInterfaces {
 				"ec2:DescribeCoipPools",
 				"ec2:GetSecurityGroupsForVpc",
 				"ec2:DescribeIpamPools",
+				"ec2:DescribeRouteTables",
 				"elasticloadbalancing:DescribeLoadBalancers",
 				"elasticloadbalancing:DescribeLoadBalancerAttributes",
 				"elasticloadbalancing:DescribeListeners",
