Documentation update for the Scaleway provider IAM policy.
- The provider’s Scaleway IAM key now needs
ElasticMetalFullAccessin addition to the Apple Silicon and networking permissions. Without it, the Elastic Metal reconciler hits a 403 on the firstlist elastic metal serverscall and cannot order runner-cache nodes. - Updated the IAM docs to list the full required permission set and explain what each role does, replacing the outdated “two permission set” guidance.
Make sure your provider IAM policy includes ElasticMetalFullAccess before relying on the runner-cache fleet.