Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

principals_push_access does not generate corresponding ECR permission statement, but principals_readonly_access does #140

Closed
HariSekhon opened this issue Dec 1, 2024 · 1 comment
Labels
bug 🐛 An issue with the system

Comments

@HariSekhon
Copy link

Describe the Bug

principals_readonly_access results in an ECR policy statement granting read actions.

But principals_push_access does not seem to generate a corresponding push only statement in ECR policy.

Expected Behavior

Expected the ECR policy to have 2 statements, one for read and one for write

Steps to Reproduce

Via Terragrunt:

terraform {
  source = "${local.base_source_url}//?version=0.32.3"
}

locals {
  base_source_url  = "tfr://registry.terraform.io/cloudposse/ecr/aws"
}

inputs = {

  image_tag_mutability = "IMMUTABLE"

  principals_push_access = [
    local.write_user_arn
  ]

  principals_readonly_access = [
    local.read_user_arn
  ]

}

Screenshots

No response

Environment

$ tf version
Terraform v1.3.3
on darwin_arm64
+ provider registry.terraform.io/hashicorp/aws v4.67.0

Additional Context

No response

@HariSekhon HariSekhon added the bug 🐛 An issue with the system label Dec 1, 2024
@HariSekhon
Copy link
Author

Updating to the latest release solved this.

It would be handy in the doc to see which version added an input option.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug 🐛 An issue with the system
Projects
None yet
Development

No branches or pull requests

1 participant