hpc-resource-provisioner: update permissions

Author: heerener

hpc/security/hpc_resource_provisioner_policy.tftpl

@@ -15,6 +15,16 @@
             ],
             "Resource": "*"
         },
+        {
+            "Sid": "FSXServiceLinkedRole",
+            "Action": [
+                "iam:AttachRolePolicy",
+                "iam:CreateServiceLinkedRole",
+                "iam:PutRolePolicy"
+            ],
+            "Resource": "arn:aws:iam::*:role/aws-service-role/s3.data-source.lustre.fsx.amazonaws.com/*",
+            "Effect": "Allow"
+        },
         {
             "Action": [
                 "ec2:Describe*"

sandbox-hpc.tfvars

@@ -18,7 +18,7 @@ is_staging                                 = false
 nexus_az_letter_id                         = "a"
 core_web_app_docker_image_url              = "bluebrain/sbo-core-web-app:2025.1.0-prod"
 virtual_lab_manager_docker_image_url       = "bluebrain/obp-virtual-lab-api:2025.1.0-prod"
-hpc_resource_provisioner_container_version = "0.5.10.dev36"
+hpc_resource_provisioner_container_version = "0.5.10.dev38"
 bluenaas_task_size = {
   cpu    = 4096
   memory = 8192