seahaven-org-baseline/lib/deploy-substrate
Adam Moussa 35461d9267
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Deploy / deploy-external-dev (push) Waiting to run
Deploy / deploy-security (push) Waiting to run
Deploy / deploy-dev (push) Waiting to run
Deploy / deploy-prod (push) Waiting to run
feat(iam): add hcptf-seahaven-site plan/apply roles (PLAT-91) (#89)
* feat(iam): add hcptf-seahaven-site plan/apply roles

Static-site HCP substrate for seahaven-site-prod plus boundary widen for
the TF-managed content-deploy role (S3 origin + CloudFront invalidate).

* fix(iam): allow seahaven-site HCP roles to read GitHub OIDC provider

Plan refresh needs iam:GetOpenIDConnectProvider for the content-deploy
role trust data source (PLAT-91 first-plan AccessDenied).
2026-08-07 15:09:57 -04:00
..
deploy-substrate.template.yaml feat(iam): add hcptf-seahaven-site plan/apply roles (PLAT-91) (#89) 2026-08-07 15:09:57 -04:00