Merge pull request #27 from openbraininstitute/allow_identity

danifr · web-flow · commit 3133c86faee5 · 2025-10-02T12:51:04.000+02:00
Allow production jupyterhub-svc-nodegroup identity to pull images from obi-notebook-image
diff --git a/main.tf b/main.tf
@@ -340,7 +340,7 @@ module "public_ecr_github_actions_upload_credentials_notebook_service" {
 module "obi_notebook_image" {
   source                     = "./private-ecr-repo"
   repository_name            = "obi-notebook-image"
-  allowed_to_pull_identities = ["arn:aws:iam::992382665735:role/eksctl-jupyterhub-svc-nodegroup-ng-NodeInstanceRole-ZT1FeO9Ce2wc"]
+  allowed_to_pull_identities = ["arn:aws:iam::992382665735:role/eksctl-jupyterhub-svc-nodegroup-ng-NodeInstanceRole-ZT1FeO9Ce2wc", "arn:aws:iam::671250183987:role/eksctl-jupyterhub-svc-nodegroup-ng-NodeInstanceRole-6yJ0qhsCTcMr"]
 }
 
 module "private_ecr_github_actions_upload_credentials_obi-notebook_image" {

Original file line number	Diff line number	Diff line change
`@@ -340,7 +340,7 @@ module "public_ecr_github_actions_upload_credentials_notebook_service" {`
`340`	`340`	`module "obi_notebook_image" {`
`341`	`341`	`source = "./private-ecr-repo"`
`342`	`342`	`repository_name = "obi-notebook-image"`
`343`		`- allowed_to_pull_identities = ["arn:aws:iam::992382665735:role/eksctl-jupyterhub-svc-nodegroup-ng-NodeInstanceRole-ZT1FeO9Ce2wc"]`
	`343`	`+ allowed_to_pull_identities = ["arn:aws:iam::992382665735:role/eksctl-jupyterhub-svc-nodegroup-ng-NodeInstanceRole-ZT1FeO9Ce2wc", "arn:aws:iam::671250183987:role/eksctl-jupyterhub-svc-nodegroup-ng-NodeInstanceRole-6yJ0qhsCTcMr"]`
`344`	`344`	`}`
`345`	`345`
`346`	`346`	`module "private_ecr_github_actions_upload_credentials_obi-notebook_image" {`