[2/2] Allow Gitlab to deploy DataBrowser/DataPortal to prod (DataBi…

…osphere/data-browser#1393, PR #2590)
DataBiosphere · Dec 10, 2020 · 42f6f7c · 42f6f7c
2 parents f209dd1 + b0bedd6
commit 42f6f7c
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/terraform/gitlab/gitlab.tf.json.template.py b/terraform/gitlab/gitlab.tf.json.template.py
@@ -544,6 +544,30 @@ def remove_inconsequential_statements(statements: List[JSON]) -> List[JSON]:
  ]
  }
  ] if config.domain_name == 'dev.singlecell.gi.ucsc.edu' else [
+ {
+ "actions": [
+ "s3:PutObject",
+ "s3:GetObject",
+ "s3:ListBucket",
+ "s3:DeleteObject",
+ "s3:PutObjectAcl"
+ ],
+ "resources": [
+ "arn:aws:s3:::org-humancellatlas-data-portal-dcp2-prod/*",
+ "arn:aws:s3:::org-humancellatlas-data-browser-dcp2-prod/*",
+ "arn:aws:s3:::org-humancellatlas-data-browser-dcp2-prod",
+ "arn:aws:s3:::org-humancellatlas-data-portal-dcp2-prod"
+ ]
+ },
+ {
+ "actions": [
+ "cloudfront:CreateInvalidation"
+ ],
+ "resources": [
+ "arn:aws:cloudfront::122796619775:distribution/E1LYQC3LZXO7M3"
+ ]
+ }
+ ] if config.domain_name == 'azul.data.humancellatlas.org' else [
  ]
  )
  ]