Add SSM session manager support about terraform-aws-gitlab-runner HOT 5 CLOSED

@int128 do you have time to have a look of the change in branch #127

from terraform-aws-gitlab-runner.

@int128 would you like to propose a PR?

from terraform-aws-gitlab-runner.

Just dit a quick check, got it working manual. Need to attached the policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ssmmessages:CreateControlChannel",
                "ssmmessages:CreateDataChannel",
                "ssmmessages:OpenControlChannel",
                "ssmmessages:OpenDataChannel"
            ],
            "Resource": "*"
        }
    ]
}

and arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore

from terraform-aws-gitlab-runner.

The instance role is currently an output of the module, so adding the required permissions is already possible. But I still like to proposal to add this as an extra feature.

from terraform-aws-gitlab-runner.

@npalm Awesome! Looks good to me. Thank you for your great work!

from terraform-aws-gitlab-runner.