whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #379 from stevesloka/patch-1

Browse Source 
Added extra IAM permissions to download images from AWS ECR
This commit is contained in:
Eric Tune
2016-04-18 11:05:38 -07:00
parent c168f89aa9 dc645e147b
commit 50081fdd22
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/user-guide/images.md
+8 -2
View File
@@ -66,9 +66,15 @@ in the Pod definition.
All users of the cluster who can create pods will be able to run pods that use any of the
images in the ECR registry.
The kubelet will fetch and periodically refresh ECR credentials. It needs the
`ecr:GetAuthorizationToken` permission to do this.
The kubelet will fetch and periodically refresh ECR credentials. It needs the following permissions to do this:
- `ecr:GetAuthorizationToken`
- `ecr:BatchCheckLayerAvailability`
- `ecr:GetDownloadUrlForLayer`
- `ecr:GetRepositoryPolicy`
- `ecr:DescribeRepositories`
- `ecr:ListImages`
- `ecr:BatchGetImage`
### Configuring Nodes to Authenticate to a Private Repository