I have Concourse setup in an Amazon EKS (k8s) cluster. The cluster has an IAM role that provides it to access a restricted set of resources needed to maintain the cluster.
Concourse is additionally seeded with a specific Concourse IAM user (via secret_access_key and access_key_id) that has access to ECR.
When I use that IAM user to push to ECR, I get a denied and not authorized to perform error. Weirdly, the role the error message references is the assumed IAM role of the cluster, and not the Concourse user of the secret_access_key and access_key_id that I passed to the docker-image resource.
I have Concourse setup in an Amazon EKS (k8s) cluster. The cluster has an IAM role that provides it to access a restricted set of resources needed to maintain the cluster.
Concourse is additionally seeded with a specific Concourse IAM user (via
secret_access_key
andaccess_key_id
) that has access to ECR.When I use that IAM user to push to ECR, I get a
denied
andnot authorized to perform
error. Weirdly, the role the error message references is the assumed IAM role of the cluster, and not the Concourse user of thesecret_access_key
andaccess_key_id
that I passed to thedocker-image
resource.My resource configuration:
I get the following output: