runnerinstall/aws-ecs: Add AddTags permission to ODR IAM policy.

The AWS ECS plugin may need to add tags to an AWS ALB, and therefore needs the AddTags permission to do so.
hashicorp · Jun 21, 2023 · 5c1ff64 · 5c1ff64
1 parent aca518e
commit 5c1ff64
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/internal/runnerinstall/ecs.go b/internal/runnerinstall/ecs.go
@@ -84,6 +84,7 @@ const odrRolePolicy = `{
         "ecs:DeregisterTaskDefinition",
         "ecs:RunTask",
         "ecs:StopTask",
+		"elasticloadbalancing:AddTags",
         "elasticloadbalancing:CreateListener",
         "elasticloadbalancing:CreateLoadBalancer",
         "elasticloadbalancing:CreateRule",
@@ -97,7 +98,7 @@ const odrRolePolicy = `{
         "elasticloadbalancing:DescribeRules",
         "elasticloadbalancing:DescribeTargetGroups",
         "elasticloadbalancing:ModifyListener",
-	"elasticloadbalancing:DescribeTargetHealth",
+		"elasticloadbalancing:DescribeTargetHealth",
         "iam:AttachRolePolicy",
         "iam:CreateRole",
         "iam:GetRole",