diff --git a/lib/actions-runner-hcptf-stack.ts b/lib/actions-runner-hcptf-stack.ts index 1b60d8f..6449acb 100644 --- a/lib/actions-runner-hcptf-stack.ts +++ b/lib/actions-runner-hcptf-stack.ts @@ -401,6 +401,9 @@ function iamPolicyDocument(): object { `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`, + `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`, + `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`, + `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`, ], }, { @@ -452,6 +455,9 @@ function planPolicy(hcpArn: string, githubArn: string): object { `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`, `arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`, + `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKS`, + `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSForFargate`, + `arn:aws:iam::${ACCOUNT}:role/AWSServiceRoleForAmazonEKSNodegroup`, `arn:aws:iam::${ACCOUNT}:role/hcptf-actions-runner`, `arn:aws:iam::${ACCOUNT}:role/hcptf-actions-runner-plan`, `arn:aws:iam::${ACCOUNT}:role/githubdeploy-seahaven-org-baseline`,