mirror of https://github.com/docker/compose.git
Support pull from ECR
close #58 Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
This commit is contained in:
parent
e9fe3b2864
commit
3283bceac6
|
@ -120,6 +120,7 @@ func (c client) Convert(project *compose.Project) (*cloudformation.Template, err
|
||||||
Policies: rolePolicies,
|
Policies: rolePolicies,
|
||||||
ManagedPolicyArns: []string{
|
ManagedPolicyArns: []string{
|
||||||
ECSTaskExecutionPolicy,
|
ECSTaskExecutionPolicy,
|
||||||
|
ECRReadOnlyPolicy,
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
template.Resources[taskDefinition] = definition
|
template.Resources[taskDefinition] = definition
|
||||||
|
|
|
@ -2,6 +2,7 @@ package amazon
|
||||||
|
|
||||||
const (
|
const (
|
||||||
ECSTaskExecutionPolicy = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
ECSTaskExecutionPolicy = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
||||||
|
ECRReadOnlyPolicy = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
|
||||||
|
|
||||||
ActionGetSecretValue = "secretsmanager:GetSecretValue"
|
ActionGetSecretValue = "secretsmanager:GetSecretValue"
|
||||||
ActionGetParameters = "ssm:GetParameters"
|
ActionGetParameters = "ssm:GetParameters"
|
||||||
|
|
|
@ -217,7 +217,8 @@
|
||||||
"Version": "2012-10-17"
|
"Version": "2012-10-17"
|
||||||
},
|
},
|
||||||
"ManagedPolicyArns": [
|
"ManagedPolicyArns": [
|
||||||
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy",
|
||||||
|
"arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"Type": "AWS::IAM::Role"
|
"Type": "AWS::IAM::Role"
|
||||||
|
|
|
@ -217,7 +217,8 @@
|
||||||
"Version": "2012-10-17"
|
"Version": "2012-10-17"
|
||||||
},
|
},
|
||||||
"ManagedPolicyArns": [
|
"ManagedPolicyArns": [
|
||||||
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy",
|
||||||
|
"arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"Type": "AWS::IAM::Role"
|
"Type": "AWS::IAM::Role"
|
||||||
|
|
Loading…
Reference in New Issue