Skip to content

Commit 43b8bcd

Browse files
committed
fix: vault aws bound principle rename in IAM
* re-assigns vault auth/aws/role/$CLUSTER-client bound principle to the new IAM role name introduced in PR#165: core-$CLUSTER-client
1 parent fc281ec commit 43b8bcd

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

profiles/bootstrap/default.nix

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -260,7 +260,7 @@ in {
260260
261261
vault write auth/aws/role/${config.cluster.name}-client \
262262
auth_type=iam \
263-
bound_iam_principal_arn="$arn:role/${config.cluster.name}-client" \
263+
bound_iam_principal_arn="$arn:role/core-${config.cluster.name}-client" \
264264
policies=default,client,nomad-server \
265265
period=24h || true # only available after 'tf.clients.apply'
266266

0 commit comments

Comments
 (0)