For what it's worth, I was able to use the Karpenter IAM policy as-is when I ran through the Terraform Getting Started guide a moment ago. Couple more questions: In your Helm upgrade command above, what is the value of KARPENTER_IAM_ROLE_ARN?