docs: fix irsa iam config snippet (#6011)

garden-io · May 7, 2024 · 724420a · 724420a
1 parent ee36cbb
commit 724420a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/docs/k8s-plugins/guides/in-cluster-building.md b/docs/k8s-plugins/guides/in-cluster-building.md
@@ -430,8 +430,10 @@ Create a [web identity role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id
             },
             "Action": "sts:AssumeRoleWithWebIdentity",
             "Condition": {
+                "StringLike": {
+                  "oidc.eks.<region>.amazonaws.com/id/<oidc-provider-id>:sub": "system:serviceaccount:*:garden-in-cluster-builder"
+                },
                 "StringEquals": {
-                    "oidc.eks.<region>.amazonaws.com/id/<oidc-provider-id>:sub": "system:serviceaccount:*:garden-in-cluster-builder",
                     "oidc.eks.<region>.amazonaws.com/id/<oidc-provider-id>:aud": "sts.amazonaws.com"
                 }
             }