fix(ci): allow GetRole on EKS service role names (#183)

This commit is contained in:
Adam Moussa 2026-10-05 20:00:07 -04:00 • committed by GitHub
parent d5bd21519e
commit ca174d2322
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -401,6 +401,9 @@ function iamPolicyDocument(): object {
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`,
],
},
{
@ -452,6 +455,9 @@ function planPolicy(hcpArn: string, githubArn: string): object {
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`,
`arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`,
`arn:aws:iam::${ACCOUNT}:role/hcptf-actions-runner`,
`arn:aws:iam::${ACCOUNT}:role/hcptf-actions-runner-plan`,
`arn:aws:iam::${ACCOUNT}:role/githubdeploy-seahaven-org-baseline`,