Allow hydra-mirror to nix-cache/debuginfo
Eelco Dolstra committed
Jul 14, 2017 at 10:58 UTC
7a485c6fb483ba6084d8b42812d3d509d563ff4c
1 file changed
+21
nixos-org/network.nix
+21
@@ -94,6 +94,27 @@ in
94
"Principal": {"AWS": "*"},
95
"Action": ["s3:GetObject"],
96
"Resource": ["${config.arn}/*"]
97
+ },
98
+ {
99
+ "Sid": "AllowUploadDebuginfoWrite",
100
+ "Effect": "Allow",
101
+ "Principal": {"AWS": "arn:aws:iam::080433136561:user/s3-upload-releases"},
102
+ "Action": ["s3:PutObject", "s3:PutObjectAcl"],
103
+ "Resource": ["${config.arn}/debuginfo/*"]
104
+ },
105
+ {
106
+ "Sid": "AllowUploadDebuginfoRead",
107
+ "Effect": "Allow",
108
+ "Principal": {"AWS": "arn:aws:iam::080433136561:user/s3-upload-releases"},
109
+ "Action": ["s3:GetObject"],
110
+ "Resource": ["${config.arn}/*"]
111
+ },
112
+ {
113
+ "Sid": "AllowUploadDebuginfoRead2",
114
+ "Effect": "Allow",
115
+ "Principal": {"AWS": "arn:aws:iam::080433136561:user/s3-upload-releases"},
116
+ "Action": ["s3:ListBucket", "s3:GetBucketLocation"],
117
+ "Resource": ["${config.arn}"]
118
}
119
]
120
}