mirror of
https://github.com/docker/compose.git
synced 2025-11-07 07:20:03 +01:00
57 lines
1.8 KiB
Go
57 lines
1.8 KiB
Go
/*
|
|
Copyright 2020 Docker, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package ecs
|
|
|
|
const (
|
|
ECSTaskExecutionPolicy = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
|
|
ECRReadOnlyPolicy = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
|
|
|
|
ActionGetSecretValue = "secretsmanager:GetSecretValue"
|
|
ActionGetParameters = "ssm:GetParameters"
|
|
ActionDecrypt = "kms:Decrypt"
|
|
)
|
|
|
|
var assumeRolePolicyDocument = PolicyDocument{
|
|
Version: "2012-10-17", // https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_version.html
|
|
Statement: []PolicyStatement{
|
|
{
|
|
Effect: "Allow",
|
|
Principal: PolicyPrincipal{
|
|
Service: "ecs-tasks.amazonaws.com",
|
|
},
|
|
Action: []string{"sts:AssumeRole"},
|
|
},
|
|
},
|
|
}
|
|
|
|
// could alternatively depend on https://github.com/kubernetes-sigs/cluster-api-provider-aws/blob/master/cmd/clusterawsadm/api/iam/v1alpha1/types.go
|
|
type PolicyDocument struct {
|
|
Version string `json:",omitempty"`
|
|
Statement []PolicyStatement `json:",omitempty"`
|
|
}
|
|
|
|
type PolicyStatement struct {
|
|
Effect string `json:",omitempty"`
|
|
Action []string `json:",omitempty"`
|
|
Principal PolicyPrincipal `json:",omitempty"`
|
|
Resource []string `json:",omitempty"`
|
|
}
|
|
|
|
type PolicyPrincipal struct {
|
|
Service string `json:",omitempty"`
|
|
}
|