adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-06 19:11:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(ci): grant the Fargate service-linked role path (#185)
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Details
Deploy / deploy-external-dev (push) Waiting to run
Details
Deploy / deploy-security (push) Waiting to run
Details
Deploy / deploy-dev (push) Waiting to run
Details
Deploy / deploy-prod (push) Waiting to run
Details
Deploy / deploy-ci (push) Waiting to run
Details

Browse source 
CreateFargateProfile authorizes iam:CreateServiceLinkedRole on eks-fargate.amazonaws.com, not eks-fargate-pods.amazonaws.com.
This commit is contained in:
Adam Moussa 2026-10-05 20:19:13 -04:00 • committed by GitHub
parent 4e68cf1ccf
commit 45ff3a906a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
lib/actions-runner-hcptf-stack.ts
View file

@ -400,6 +400,7 @@ function iamPolicyDocument(): object {
Resource: [
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`,
@ -417,6 +418,7 @@ function iamPolicyDocument(): object {
"eks.amazonaws.com",
"eks-nodegroup.amazonaws.com",
"eks-fargate-pods.amazonaws.com",
"eks-fargate.amazonaws.com",
],
},
},
@ -431,6 +433,7 @@ function iamPolicyDocument(): object {
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
],
},
@ -467,6 +470,7 @@ function planPolicy(hcpArn: string, githubArn: string): object {
`arn:aws:iam::${ACCOUNT}:role/tf-managed/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`,