@@ -126,6 +126,31 @@ jobs:
126126 password : ${{ secrets.DOCKERHUB_TOKEN }}
127127 - name : Authenticate with Public ECR
128128 uses : docker/login-action@v3
129+ # this uses an access key for an IAM user with the policy:
130+ # {
131+ # "Version": "2012-10-17",
132+ # "Statement": [
133+ # {
134+ # "Effect": "Allow",
135+ # "Action": [
136+ # "ecr-public:InitiateLayerUpload",
137+ # "ecr-public:UploadLayerPart",
138+ # "ecr-public:PutImage",
139+ # "ecr-public:CompleteLayerUpload",
140+ # "ecr-public:BatchCheckLayerAvailability"
141+ # ],
142+ # "Resource": "arn:aws:ecr-public::<aws-account-here>:repository/refacto"
143+ # },
144+ # {
145+ # "Effect": "Allow",
146+ # "Action": [
147+ # "sts:GetServiceBearerToken",
148+ # "ecr-public:GetAuthorizationToken"
149+ # ],
150+ # "Resource": "*"
151+ # }
152+ # ]
153+ # }
129154 with :
130155 registry : public.ecr.aws
131156 username : ${{ secrets.ECR_PUBLIC_AWS_ACCESS_KEY_ID }}
@@ -154,8 +179,8 @@ jobs:
154179 tags : |
155180 docker.io/refacto/refacto:${{ needs.build_and_test.outputs.version }}
156181 docker.io/refacto/refacto:latest
157- public.ecr.aws/refacto /refacto:${{ needs.build_and_test.outputs.version }}
158- public.ecr.aws/refacto /refacto:latest
182+ public.ecr.aws/w4z9z1e2 /refacto:${{ needs.build_and_test.outputs.version }}
183+ public.ecr.aws/w4z9z1e2 /refacto:latest
159184 labels : |
160185 org.opencontainers.image.title=Refacto
161186 org.opencontainers.image.description=The Refacto app for running online Retrospectives
0 commit comments