allow editor to create cluster-api roles

MohamedMSaeed · MohamedMSaeed · commit 6b99ee82a11d · 2022-10-12T15:53:50.000+02:00
diff --git a/terraform/account/data.tf b/terraform/account/data.tf
@@ -130,7 +130,11 @@ data "aws_iam_policy_document" "eks_editor" {
       "arn:aws:iam::894516026745:policy/eksctl-*",
       "arn:aws:iam::894516026745:oidc-provider/*",
       "arn:aws:iam::894516026745:role/aws-service-role/eks-nodegroup.amazonaws.com/AWSServiceRoleForAmazonEKSNodegroup",
-      "arn:aws:iam::894516026745:role/eksctl-managed-*"
+      "arn:aws:iam::894516026745:role/eksctl-managed-*",
+      "arn:aws:iam::894516026745:instance-profile/wge-capi-*",
+      "arn:aws:iam::894516026745:role/wge-capi-*",
+      "arn:aws:iam::894516026745:policy/wge-capi-*",
+      "arn:aws:iam::894516026745:role/eks-*"
     ]
   }
 

Original file line number	Diff line number	Diff line change
`@@ -130,7 +130,11 @@ data "aws_iam_policy_document" "eks_editor" {`
`130`	`130`	`"arn:aws:iam::894516026745:policy/eksctl-*",`
`131`	`131`	`"arn:aws:iam::894516026745:oidc-provider/*",`
`132`	`132`	`"arn:aws:iam::894516026745:role/aws-service-role/eks-nodegroup.amazonaws.com/AWSServiceRoleForAmazonEKSNodegroup",`
`133`		`- "arn:aws:iam::894516026745:role/eksctl-managed-*"`
	`133`	`+ "arn:aws:iam::894516026745:role/eksctl-managed-*",`
	`134`	`+ "arn:aws:iam::894516026745:instance-profile/wge-capi-*",`
	`135`	`+ "arn:aws:iam::894516026745:role/wge-capi-*",`
	`136`	`+ "arn:aws:iam::894516026745:policy/wge-capi-*",`
	`137`	`+ "arn:aws:iam::894516026745:role/eks-*"`
`134`	`138`	`]`
`135`	`139`	`}`
`136`	`140`