Add pull-through ECR permissions for EKS nodes

alphagov / govuk-infrastructure

Terraform turnup automation for the EKS Kubernetes clusters that host GOV.UK. See https://github.com/alphagov/govuk-helm-charts for application config.

MIT License

138 stars 24 forks source link

Add pull-through ECR permissions for EKS nodes #1372

Closed theseanything closed 1 month ago

theseanything commented 1 month ago

This replaces the AWS managed policy with a custom policy that contains the same permissions plus an additional "BatchImportUpstreamImage" permission. This allows the nodes to pull-through from ghcr.io if images are missing.