Merge pull request #847 from fluxcd/int-perm-change

oci/int: Grant new permissions needed by AWS infra
fluxcd · Dec 23, 2024 · a8278c8 · a8278c8
2 parents 8c4af78 + 1af36ba
commit a8278c8
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/oci/tests/integration/README.md b/oci/tests/integration/README.md
@@ -155,16 +155,22 @@ provisioning the infrastructure and running the tests:
                 "eks:UpdateNodegroupVersion",
                 "iam:AttachRolePolicy",
                 "iam:CreateOpenIDConnectProvider",
+                "iam:CreatePolicy",
                 "iam:CreateRole",
                 "iam:DeleteOpenIDConnectProvider",
+                "iam:DeletePolicy",
                 "iam:DeleteRole",
                 "iam:DetachRolePolicy",
                 "iam:GetOpenIDConnectProvider",
+                "iam:GetPolicy",
+                "iam:GetPolicyVersion",
                 "iam:GetRole",
                 "iam:ListAttachedRolePolicies",
                 "iam:ListInstanceProfilesForRole",
+                "iam:ListPolicyVersions",
                 "iam:ListRolePolicies",
                 "iam:TagOpenIDConnectProvider",
+                "iam:TagPolicy",
                 "iam:TagRole",
                 "ssm:GetParameters"
             ],
@@ -294,16 +300,22 @@ module "aws_gh_actions" {
     "eks:UpdateNodegroupVersion",
     "iam:AttachRolePolicy",
     "iam:CreateOpenIDConnectProvider",
+    "iam:CreatePolicy",
     "iam:CreateRole",
     "iam:DeleteOpenIDConnectProvider",
+    "iam:DeletePolicy",
     "iam:DeleteRole",
     "iam:DetachRolePolicy",
     "iam:GetOpenIDConnectProvider",
+    "iam:GetPolicy",
+    "iam:GetPolicyVersion",
     "iam:GetRole",
     "iam:ListAttachedRolePolicies",
     "iam:ListInstanceProfilesForRole",
+    "iam:ListPolicyVersions",
     "iam:ListRolePolicies",
     "iam:TagOpenIDConnectProvider",
+    "iam:TagPolicy",
     "iam:TagRole",
     "ssm:GetParameters"
   ]