APM-1598 Point task definition to dev account docker registry

strutt · strutt · commit 3113633792c5 · 2021-01-15T11:26:22.000Z
diff --git a/ansible/roles/create-api-deployment-pre-reqs/templates/terraform/iam.tf b/ansible/roles/create-api-deployment-pre-reqs/templates/terraform/iam.tf
@@ -286,4 +286,15 @@ data "aws_iam_policy_document" "deploy-user" {
 
   }
 
+  statement {
+    actions = [
+      "ssm:GetParameter",
+      "ssm:GetParameters",
+      "ssm:GetParametersByPath",
+    ]
+
+    resources = [
+      "arn:aws:ssm:${local.region}:${local.account_id}:parameter/${var.account}/account-ids/*",
+    ]
+  }
 }
diff --git a/ansible/roles/deploy-ecs-proxies/templates/terraform/locals.tf b/ansible/roles/deploy-ecs-proxies/templates/terraform/locals.tf
@@ -1,9 +1,11 @@
 data "aws_caller_identity" "current" {}
 data "aws_region" "current" {}
-
-
+data "aws_ssm_parameter" "ptl_account_id" {
+  name = "/account-ids/ptl"
+}
 
 locals {
+  ptl_account_id = data.aws_ssm_parameter.ptl_account_id.value
   account_id = data.aws_caller_identity.current.account_id
   region = data.aws_region.current.name
   env_service_id = "${var.apigee_environment}-${var.service_id}"
@@ -49,7 +51,7 @@ locals {
         (
           container
           | combine(
-            {'image': '${local.account_id}.dkr.ecr.eu-west-2.amazonaws.com/' + service_id + '_' + container.name + ':' + build_label }
+            {'image': '${local.ptl_account_id}.dkr.ecr.eu-west-2.amazonaws.com/' + service_id + '_' + container.name + ':' + build_label }
           )
         ) | to_json
     }},

Original file line number	Diff line number	Diff line change
`@@ -286,4 +286,15 @@ data "aws_iam_policy_document" "deploy-user" {`
`286`	`286`
`287`	`287`	`}`
`288`	`288`
	`289`	`+ statement {`
	`290`	`+ actions = [`
	`291`	`+ "ssm:GetParameter",`
	`292`	`+ "ssm:GetParameters",`
	`293`	`+ "ssm:GetParametersByPath",`
	`294`	`+ ]`
	`295`	`+`
	`296`	`+ resources = [`
	`297`	`+ "arn:aws:ssm:${local.region}:${local.account_id}:parameter/${var.account}/account-ids/*",`
	`298`	`+ ]`
	`299`	`+ }`
`289`	`300`	`}`