Skip to content

Commit c8742b8

Browse files
committed
amc: add SponsorAppDev role
ruby-no-kai/sponsor-app#88
1 parent df20e73 commit c8742b8

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

tf/himari/config.ru

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -248,19 +248,22 @@ use(Himari::Middlewares::AuthorizationRule, name: 'amc-github') do |context, dec
248248

249249
if groups.include?('ruby-no-kai/rk-aws-admin')
250250
roles.push('arn:aws:iam::005216166247:role/OrgzAdmin')
251+
roles.push('arn:aws:iam::005216166247:role/SponsorAppDev')
251252
end
252253
if groups.include?('ruby-no-kai/rk-noc')
253254
roles.push('arn:aws:iam::005216166247:role/NocAdmin')
255+
roles.push('arn:aws:iam::005216166247:role/SponsorAppDev')
254256
end
255257
if groups.include?('ruby-no-kai/rk-orgz') || groups.include?('ruby-no-kai/rk24-orgz')
256258
roles.push('arn:aws:iam::005216166247:role/KaigiStaff')
259+
roles.push('arn:aws:iam::005216166247:role/SponsorAppDev')
257260
end
258261

259262
if groups.include?('kaigionrails/infra')
260263
roles.push('arn:aws:iam::861452569180:role/OrganizationAccountAccessRole')
261264
end
262265

263-
decision.claims[:roles] = roles
266+
decision.claims[:roles] = roles.uniq
264267
decision.allowed_claims.push(:roles)
265268

266269
unless roles.empty?

0 commit comments

Comments
 (0)