Merge pull request #688 from fluxcd/int-perm-change

test/int: Grant new permissions needed by AWS infra
fluxcd · Dec 23, 2024 · 65c88a5 · 65c88a5
2 parents f76c4b0 + 1fa003b
commit 65c88a5
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/tests/integration/README.md b/tests/integration/README.md
@@ -111,16 +111,22 @@ provisioning the infrastructure and running the tests:
                 "eks:UpdateNodegroupVersion",
                 "iam:AttachRolePolicy",
                 "iam:CreateOpenIDConnectProvider",
+                "iam:CreatePolicy",
                 "iam:CreateRole",
                 "iam:DeleteOpenIDConnectProvider",
+                "iam:DeletePolicy",
                 "iam:DeleteRole",
                 "iam:DetachRolePolicy",
                 "iam:GetOpenIDConnectProvider",
+                "iam:GetPolicy",
+                "iam:GetPolicyVersion",
                 "iam:GetRole",
                 "iam:ListAttachedRolePolicies",
                 "iam:ListInstanceProfilesForRole",
+                "iam:ListPolicyVersions",
                 "iam:ListRolePolicies",
                 "iam:TagOpenIDConnectProvider",
+                "iam:TagPolicy",
                 "iam:TagRole",
                 "ssm:GetParameters"
             ],
@@ -250,16 +256,22 @@ module "aws_gh_actions" {
     "eks:UpdateNodegroupVersion",
     "iam:AttachRolePolicy",
     "iam:CreateOpenIDConnectProvider",
+    "iam:CreatePolicy",
     "iam:CreateRole",
     "iam:DeleteOpenIDConnectProvider",
+    "iam:DeletePolicy",
     "iam:DeleteRole",
     "iam:DetachRolePolicy",
     "iam:GetOpenIDConnectProvider",
+    "iam:GetPolicy",
+    "iam:GetPolicyVersion",
     "iam:GetRole",
     "iam:ListAttachedRolePolicies",
     "iam:ListInstanceProfilesForRole",
+    "iam:ListPolicyVersions",
     "iam:ListRolePolicies",
     "iam:TagOpenIDConnectProvider",
+    "iam:TagPolicy",
     "iam:TagRole",
     "ssm:GetParameters"
   ]