chore(crossplane): split providerconfigs and use a chain of AssumeRoles
This commit is contained in:
parent
861aa2cbcc
commit
76ec3d0c54
4 changed files with 42 additions and 5 deletions
18
bootstrap/crossplane/providerconfig.route53.yaml
Normal file
18
bootstrap/crossplane/providerconfig.route53.yaml
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
apiVersion: aws.upbound.io/v1beta1
|
||||
kind: ProviderConfig
|
||||
metadata:
|
||||
name: route53
|
||||
annotations:
|
||||
argocd.argoproj.io/hook: PostSync
|
||||
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
|
||||
spec:
|
||||
assumeRoleChain:
|
||||
- roleARN: "arn:aws:iam::000654387266:role/CrossplaneServiceRole"
|
||||
- roleARN: "arn:aws:iam::000654387266:role/Route53ManagementRole"
|
||||
|
||||
credentials:
|
||||
source: Secret
|
||||
secretRef:
|
||||
namespace: crossplane-system
|
||||
name: aws-secret
|
||||
key: creds
|
||||
Loading…
Add table
Add a link
Reference in a new issue