chore(crossplane): split providerconfigs and use a chain of AssumeRoles

This commit is contained in:
David Landry 2025-03-01 13:56:49 -05:00
parent 861aa2cbcc
commit 76ec3d0c54
4 changed files with 42 additions and 5 deletions

View file

@ -0,0 +1,18 @@
apiVersion: aws.upbound.io/v1beta1
kind: ProviderConfig
metadata:
name: route53
annotations:
argocd.argoproj.io/hook: PostSync
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
spec:
assumeRoleChain:
- roleARN: "arn:aws:iam::000654387266:role/CrossplaneServiceRole"
- roleARN: "arn:aws:iam::000654387266:role/Route53ManagementRole"
credentials:
source: Secret
secretRef:
namespace: crossplane-system
name: aws-secret
key: creds