mirror of https://github.com/docker/compose.git
Support pull from ECR
close #58 Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
This commit is contained in:
parent
e9fe3b2864
commit
3283bceac6
|
@ -120,6 +120,7 @@ func (c client) Convert(project *compose.Project) (*cloudformation.Template, err
|
|||
Policies: rolePolicies,
|
||||
ManagedPolicyArns: []string{
|
||||
ECSTaskExecutionPolicy,
|
||||
ECRReadOnlyPolicy,
|
||||
},
|
||||
}
|
||||
template.Resources[taskDefinition] = definition
|
||||
|
|
|
@ -2,6 +2,7 @@ package amazon
|
|||
|
||||
const (
|
||||
ECSTaskExecutionPolicy = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
||||
ECRReadOnlyPolicy = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
|
||||
|
||||
ActionGetSecretValue = "secretsmanager:GetSecretValue"
|
||||
ActionGetParameters = "ssm:GetParameters"
|
||||
|
|
|
@ -217,7 +217,8 @@
|
|||
"Version": "2012-10-17"
|
||||
},
|
||||
"ManagedPolicyArns": [
|
||||
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
||||
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy",
|
||||
"arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
|
||||
]
|
||||
},
|
||||
"Type": "AWS::IAM::Role"
|
||||
|
|
|
@ -217,7 +217,8 @@
|
|||
"Version": "2012-10-17"
|
||||
},
|
||||
"ManagedPolicyArns": [
|
||||
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
||||
"arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy",
|
||||
"arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
|
||||
]
|
||||
},
|
||||
"Type": "AWS::IAM::Role"
|
||||
|
|
Loading…
Reference in New Issue