BB-366: add gc read_accounts policies

scality · Jun 15, 2023 · 498171a · 498171a
1 parent 45a5417
commit 498171a
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -67,7 +67,8 @@ jobs:
             extensions/lifecycle/objectProcessor/policy.json:application/vnd.iam-policy+json \
             extensions/lifecycle/objectProcessor/policy_transition.json:application/vnd.iam-policy+json \
             extensions/gc/policy.json:application/vnd.iam-policy+json \
-            policies/queue_populator_policy.json:application/vnd.iam-policy+json
+            policies/queue_populator_policy.json:application/vnd.iam-policy+json \
+            policies/read_accounts.json:application/vnd.iam-policy+json
 
       - name: Build and push
         uses: docker/build-push-action@v4

diff --git a/policies/read_accounts.json b/policies/read_accounts.json
@@ -0,0 +1,11 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [{
+        "Sid": "ReadAccounts",
+        "Effect": "Allow",
+        "Action": [
+            "vaultadmin:GetAccountInfo"
+        ],
+        "Resource": "arn:aws:iam::*:root"
+    }]
+}