Skip to content

add needed perms to fix failing applies for 101-ecr-repos service - #681

Merged
jasonvinson merged 1 commit into
mainfrom
jv/bugfix-ecr-repo-perms
Nov 10, 2026
Merged

jasonvinson merged 1 commit into
mainfrom
jv/bugfix-ecr-repo-perms

Conversation

@jasonvinson

Copy link
Copy Markdown
Contributor

🎫 Ticket

https://jira.cms.gov/browse/...

🛠 Changes

Grant the GitHub Actions CI roles the ECR repository-policy actions:

  • ecr:GetRepositoryPolicy added to EcrReadAllApps (cdap) and EcrRead (all apps)
  • ecr:SetRepositoryPolicy / ecr:DeleteRepositoryPolicy added to EcrWrite

ℹ️ Context

Plans failing for 101-ecr-repos resource AccessDeniedException on ecr:GetRepositoryPolicy for cdap-its-log

🧪 Validation

  • the 101-ecr-repos plan error should clear once this is applied to the roles

@jasonvinson
jasonvinson marked this pull request as ready for review November 6, 2026 21:04
@jasonvinson
jasonvinson requested a review from a team as a code owner November 6, 2026 21:04
@jasonvinson
jasonvinson merged commit cf44249 into main Nov 10, 2026
18 of 20 checks passed
@jasonvinson
jasonvinson deleted the jv/bugfix-ecr-repo-perms branch November 10, 2026 15:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants