diff --git a/lib/actions-runner-hcptf-stack.ts b/lib/actions-runner-hcptf-stack.ts index 8df9f48..4c3a6f5 100644 --- a/lib/actions-runner-hcptf-stack.ts +++ b/lib/actions-runner-hcptf-stack.ts @@ -400,6 +400,7 @@ function iamPolicyDocument(): object { Resource: [ `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`, + `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`, `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`, @@ -417,6 +418,7 @@ function iamPolicyDocument(): object { "eks.amazonaws.com", "eks-nodegroup.amazonaws.com", "eks-fargate-pods.amazonaws.com", + "eks-fargate.amazonaws.com", ], }, }, @@ -431,6 +433,7 @@ function iamPolicyDocument(): object { `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`, + `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`, ], }, @@ -467,6 +470,7 @@ function planPolicy(hcpArn: string, githubArn: string): object { `arn:aws:iam::${ACCOUNT}:role/tf-managed/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`, + `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`, `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`,