284f26303c
* Fix copy/pasta for ecs_ecr test names * Add support for lifecycle policies to ecs_ecr New feature for ecs_ecr to support [ECR Lifecycle Policies][]. Fixes #32003 [ECR Lifecycle Policies]: https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html * Improve error message for ecs_ecr parsing errors Replaces the exception and stack trace with a description of what's actually going wrong from a user perspective. * Rename delete policy to purge policy Marks the `delete_policy` parameter as deprecated, to be removed in Ansible 2.6. * Add version_added to purge_policy * Remove changing results based on verbosity What I really want is --diff support, and changing results based on verbosity is abnormal. * Ensure repository name is lowercase * Fix deprecation cycle to 4 releases * Use a YAML anchor for credentials * Remove filters from assertions * Add minimal permissions needed * Updating version_added and deprecation cycle The original PR sat while a few releases happened. * Bumping version added and deprecation version We missed the 2.8 release. * Removing bare except: This is not allowed and is generally bad practice. * Fix lint errors * update ansible release metadata * Use the new alias deprecation scheme This was added in the time the PR has been in development, so rework things to use it. * Add test coverage This makes sure that lifecycle_policy is produced when passed in. *Also a minor suggestion for simplification from PR. * Restore changes from 62871 lost in rebase * Add changelog * Remove version_added for new purge_policy option Per sanity test fail.
80 lines
2.3 KiB
JSON
80 lines
2.3 KiB
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Sid": "UnspecifiedCodeRepositories",
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"ecr:DescribeRepositories",
|
|
"ecr:CreateRepository"
|
|
],
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Sid": "SpecifiedCodeRepositories",
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"ecr:GetLifecyclePolicy",
|
|
"ecr:PutLifecyclePolicy",
|
|
"ecr:DeleteLifecyclePolicy",
|
|
"ecr:GetRepositoryPolicy",
|
|
"ecr:SetRepositoryPolicy",
|
|
"ecr:DeleteRepository",
|
|
"ecr:DeleteRepositoryPolicy",
|
|
"ecr:DeleteRepositoryPolicy"
|
|
],
|
|
"Resource": [
|
|
"arn:aws:ecr:{{aws_region}}:{{aws_account}}:repository/ansible-*"
|
|
]
|
|
},
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"application-autoscaling:Describe*",
|
|
"application-autoscaling:PutScalingPolicy",
|
|
"application-autoscaling:RegisterScalableTarget",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"ecs:CreateCluster",
|
|
"ecs:CreateService",
|
|
"ecs:DeleteCluster",
|
|
"ecs:DeleteService",
|
|
"ecs:DeregisterTaskDefinition",
|
|
"ecs:Describe*",
|
|
"ecs:List*",
|
|
"ecs:PutAccountSetting",
|
|
"ecs:RegisterTaskDefinition",
|
|
"ecs:RunTask",
|
|
"ecs:StartTask",
|
|
"ecs:StopTask",
|
|
"ecs:UpdateService",
|
|
"elasticloadbalancing:Describe*",
|
|
"iam:GetInstanceProfile",
|
|
"iam:GetPolicy",
|
|
"iam:GetPolicyVersion",
|
|
"iam:GetRole",
|
|
"iam:ListAttachedRolePolicies",
|
|
"iam:ListGroups",
|
|
"iam:ListRoles",
|
|
"iam:ListUsers"
|
|
],
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"eks:CreateCluster",
|
|
"eks:DeleteCluster",
|
|
"eks:DescribeCluster",
|
|
"eks:ListClusters"
|
|
],
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
|
|
|
|
]
|
|
}
|