Add external secrets operator

2026-08-19 09:25:43 -04:00 · 2026-08-19 09:25:43 -04:00 · fe056fd9f9
commit fe056fd9f9
parent 3a5b7c2258
6 changed files with 109 additions and 0 deletions
--- a/terraform/iam.tf
+++ b/terraform/iam.tf
@ -39,3 +39,21 @@ resource "aws_iam_role_policy" "node_s3_logs" {
    ]
  })
 }
+
+# Secrets Manager access for External Secrets Operator
+resource "aws_iam_role_policy" "node_secrets_manager" {
+  name = "secrets-manager-read"
+  role = aws_iam_role.node.id
+
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Effect   = "Allow"
+        Action   = ["secretsmanager:GetSecretValue", "secretsmanager:DescribeSecret"]
+        Resource = aws_secretsmanager_secret.dumpnet.arn
+      }
+    ]
+  })
+}
+