adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-07 04:31:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(ci): let the runner apply role read EKS service roles (#181)

Browse source
This commit is contained in:
Adam Moussa 2026-10-05 19:48:18 -04:00 • committed by GitHub
parent 98c11e09ad
commit ce41cfecda
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
lib/actions-runner-hcptf-stack.ts
View file

@ -393,6 +393,16 @@ function iamPolicyDocument(): object {
],
Resource: `arn:aws:iam::${ACCOUNT}:oidc-provider/*`,
},
{
Sid: "ReadEksServiceRoles",
Effect: "Allow",
Action: "iam:GetRole",
Resource: [
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-fargate-pods.amazonaws.com/*`,
`arn:aws:iam::${ACCOUNT}:role/aws-service-role/eks-nodegroup.amazonaws.com/*`,
],
},
{
Sid: "ServiceLinkedRoles",
Effect: "Allow",