fix: Add ssm:DescribeParameters permission to external-secrets IAM role for service account (IRSA) (#348)

jaydeland · web-flow · commit fe8d73b6ee0b · 2023-03-21T16:04:02.000-04:00
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -435,6 +435,7 @@ data "aws_iam_policy_document" "external_secrets" {
     actions = [
       "ssm:GetParameter",
       "ssm:GetParameters",
+      "ssm:DescribeParameters",
     ]
     resources = var.external_secrets_ssm_parameter_arns
   }

Original file line number	Diff line number	Diff line change
`@@ -435,6 +435,7 @@ data "aws_iam_policy_document" "external_secrets" {`
`435`	`435`	`actions = [`
`436`	`436`	`"ssm:GetParameter",`
`437`	`437`	`"ssm:GetParameters",`
	`438`	`+ "ssm:DescribeParameters",`
`438`	`439`	`]`
`439`	`440`	`resources = var.external_secrets_ssm_parameter_arns`
`440`	`441`	`}`