Fix OIDC access to KMS key (#220)

We should pass in a Role ARN to the key fix for commit 57b591f
Sage-Bionetworks-Workflows · Jun 28, 2023 · c302788 · c302788
1 parent 57b591f
commit c302788
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/config/infra-ampad/workflows-kms-key.yaml b/config/infra-ampad/workflows-kms-key.yaml
@@ -7,7 +7,7 @@ parameters:
   AccountAdminArns:
     - {{stack_group_config.sso_admin_role.arn}}
     - !stack_output_external workflows-nextflow-ci-service-account::ServiceRoleArn
-    - !stack_output_external workflows-infra-kms-key::KeyArn
+    - !stack_output_external github-oidc-nextflow-infra::ProviderRoleArn
 
 stack_tags:
   {{stack_group_config.default_stack_tags}}
diff --git a/config/infra-dev/workflows-kms-key.yaml b/config/infra-dev/workflows-kms-key.yaml
@@ -7,7 +7,7 @@ parameters:
   AccountAdminArns:
     - {{stack_group_config.sso_admin_role.arn}}
     - !stack_output_external workflows-nextflow-ci-service-account::ServiceRoleArn
-    - !stack_output_external workflows-infra-kms-key::KeyArn
+    - !stack_output_external sagebase-github-oidc-workflows-dev-nextflow-infra::ProviderRoleArn
 
 stack_tags:
   {{stack_group_config.default_stack_tags}}
diff --git a/config/infra-prod/workflows-kms-key.yaml b/config/infra-prod/workflows-kms-key.yaml
@@ -7,7 +7,7 @@ parameters:
   AccountAdminArns:
     - {{stack_group_config.sso_admin_role.arn}}
     - !stack_output_external workflows-nextflow-ci-service-account::ServiceRoleArn
-    - !stack_output_external workflows-infra-kms-key::KeyArn
+    - !stack_output_external sagebase-github-oidc-workflows-prod-nextflow-infra::ProviderRoleArn
 
 stack_tags:
   {{stack_group_config.default_stack_tags}}