mirror of
https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git
synced 2026-10-06 20:21:58 +00:00
fix(ci): allow GetRole on EKS service role names (#183)
This commit is contained in:
parent
d5bd21519e
commit
ca174d2322
1 changed files with 6 additions and 0 deletions
|
|
@ -401,6 +401,9 @@ function iamPolicyDocument(): object {
|
|||
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`,
|
||||
],
|
||||
},
|
||||
{
|
||||
|
|
@ -452,6 +455,9 @@ function planPolicy(hcpArn: string, githubArn: string): object {
|
|||
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/hcptf-actions-runner`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/hcptf-actions-runner-plan`,
|
||||
`arn:aws:iam::${ACCOUNT}:role/githubdeploy-seahaven-org-baseline`,
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue