Skip to content

Update ECR publish role ARN path to /crossplane/ - #70

Merged
nresare merged 1 commit into
mainfrom
use_crossplane_role_path_for_ecr_publish
Sep 10, 2026
Merged

nresare merged 1 commit into
mainfrom
use_crossplane_role_path_for_ecr_publish

Conversation

@nresare

@nresare nresare commented Sep 10, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Role creation for public-repo ECR publish roles has moved from the pipeline-roles setup to a dedicated crossplane path/permissions boundary.
  • Updates the role-to-assume ARN in the publish workflow(s) to use /crossplane/ instead of /product-roles/, matching the new role path.

Test plan

  • Delete the old /product-roles/idcat-ecr-publish role manually once the new role is applied
  • Verify the publish workflow can assume the new role

The role is now created under the /crossplane/ path with a shared
permissions boundary, disentangled from the pipeline-roles setup.
@nresare
nresare merged commit e997469 into main Sep 10, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant