added ECR login for podman containers needed [debyltech]

This commit is contained in:
Bastian de Byl
2023-05-05 12:39:01 -04:00
parent 81fb5b143f
commit c9171b8c2a
3 changed files with 29 additions and 2 deletions

View File

@@ -1,4 +1,6 @@
--- ---
- import_tasks: podman-ecr-login.yml
- name: create fulfillr host directory volumes - name: create fulfillr host directory volumes
become: true become: true
ansible.builtin.file: ansible.builtin.file:
@@ -35,7 +37,7 @@
become_user: "{{ podman_user }}" become_user: "{{ podman_user }}"
containers.podman.podman_container: containers.podman.podman_container:
name: fulfillr name: fulfillr
image: "{{ aws_ecr_endpoint }}/fulfillr:20230503.1628" image: "{{ aws_ecr_endpoint }}/fulfillr:20230505.1608"
command: --config /config/production.json command: --config /config/production.json
recreate: true recreate: true
restart: true restart: true

View File

@@ -0,0 +1,25 @@
---
- name: fetch aws ecr auth token
become: true
become_user: podman
shell: |
aws ecr get-authorization-token --region us-east-1
register: ecr_command
tags: always
- set_fact:
ecr_authorization_data: "{{ (ecr_command.stdout | from_json).authorizationData[0] }}"
tags: always
- set_fact:
ecr_credentials: "{{ (ecr_authorization_data.authorizationToken | b64decode).split(':') }}"
tags: always
- name: podman login to AWS ECR
become: true
become_user: podman
containers.podman.podman_login:
registry: "{{ aws_ecr_endpoint }}"
username: "{{ ecr_credentials[0] }}"
password: "{{ ecr_credentials[1] }}"
tags: always