Adam Moussa
|
e8e60dbad6
|
fix(ci): let the runner plan role read the Karpenter chart (#186)
Deploy / deploy-management (push) Waiting to run
Deploy / deploy-external-dev (push) Waiting to run
Deploy / deploy-security (push) Waiting to run
Deploy / deploy-dev (push) Waiting to run
Deploy / deploy-prod (push) Waiting to run
Deploy / deploy-ci (push) Waiting to run
The platform plan fetches a public ECR token. That call was only granted to the apply role.
|
2026-10-05 20:52:43 -04:00 |
|
Adam Moussa
|
45ff3a906a
|
fix(ci): grant the Fargate service-linked role path (#185)
Deploy / deploy-management (push) Waiting to run
Deploy / deploy-external-dev (push) Waiting to run
Deploy / deploy-security (push) Waiting to run
Deploy / deploy-dev (push) Waiting to run
Deploy / deploy-prod (push) Waiting to run
Deploy / deploy-ci (push) Waiting to run
CreateFargateProfile authorizes iam:CreateServiceLinkedRole on eks-fargate.amazonaws.com, not eks-fargate-pods.amazonaws.com.
|
2026-10-05 20:19:13 -04:00 |
|
Adam Moussa
|
4e68cf1ccf
|
fix(ci): allow CreateServiceLinkedRole on EKS role names (#184)
CreateFargateProfile authorizes the service-linked role by its pathless name before the role exists.
|
2026-10-05 20:09:46 -04:00 |
|
Adam Moussa
|
ca174d2322
|
fix(ci): allow GetRole on EKS service role names (#183)
|
2026-10-05 20:00:07 -04:00 |
|
Adam Moussa
|
d5bd21519e
|
fix(ci): let the runner plan role refresh cluster resources (#182)
|
2026-10-05 19:53:46 -04:00 |
|
Adam Moussa
|
ce41cfecda
|
fix(ci): let the runner apply role read EKS service roles (#181)
|
2026-10-05 19:48:18 -04:00 |
|
Adam Moussa
|
98c11e09ad
|
feat(ci): add the seahaven-ci baseline and runner exec roles (PLAT-253) (#180)
* feat(ci): add the seahaven-ci baseline and runner exec roles
* fix(ci): allow collection reads on the runner apply role
|
2026-10-05 19:36:55 -04:00 |
|