pass role to admin, bump image for env

hackforla · Oct 24, 2024 · 741e2d6 · 741e2d6
1 parent 860b425
commit 741e2d6
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/terraform-incubator/home-unite-us/dev/ecs.tf b/terraform-incubator/home-unite-us/dev/ecs.tf
@@ -42,7 +42,7 @@ resource "aws_ecs_task_definition" "homeuniteus" {
         }]
         essential = true
         # image     = "035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:20241017.1"
-        image     = "035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:20241023.2"
+        image     = "035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:20241023.3"
         logConfiguration = {
           logDriver = "awslogs"
           options = {

diff --git a/terraform-incubator/home-unite-us/dev/iam.tf b/terraform-incubator/home-unite-us/dev/iam.tf
@@ -147,6 +147,15 @@ resource "aws_iam_policy" "homeuniteus_manage_ecr" {
         Resource = [
           "arn:aws:ecs:us-west-2:035866691871:task-definition/homeuniteus:*"
         ]
+      },
+      {
+        Effect = "Allow",
+        Action = [
+          "iam:PassRole"
+        ],
+        Resource = [
+          "arn:aws:iam::035866691871:role/incubator-prod-ecs-task-role"
+        ]
       }
       # 
       //arn:aws:cloudshell:us-west-2:035866691871:environment/642f2b30-d2dd-4fc6-95ad-3e32b4163d23