Skip to content

fix(bootstrap): rebootstrap breaks container Functions#19446

Merged
mergify[bot] merged 3 commits intomasterfrom
huijbers/bootstrap-ecr-policy
Mar 18, 2022
Merged

fix(bootstrap): rebootstrap breaks container Functions#19446
mergify[bot] merged 3 commits intomasterfrom
huijbers/bootstrap-ecr-policy

Conversation

@rix0rrr
Copy link
Copy Markdown
Contributor

@rix0rrr rix0rrr commented Mar 17, 2022

Container Functions automatically add a policy to an ECR repository to
allow Lambda to pull from it; however, when the ECR repository is
rebootstrapped and has changed, the policy might be overwritten.

Add the policy to the bootstrap stack, so we don't have to rely on
Lambda to add it and it will survive rebootstraps.

This introduces version 11 of the bootstrap stack. You do not need
to upgrade to this version unless you are affected by this issue.

Fixes #18473.


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

Container Functions automatically add a policy to an ECR repository to
allow Lambda to pull from it; however, when the ECR repository is
rebootstrapped and has changed, the policy might be overwritten.

Add the policy to the bootstrap stack, so we don't have to rely on
Lambda to add it and it will survive rebootstraps.

This introduces version 11 of the bootstrap stack. You do not need
to upgrade to this version unless you are affected by this issue.

Fixes #18473.
@rix0rrr rix0rrr requested a review from a team March 17, 2022 16:21
@rix0rrr rix0rrr self-assigned this Mar 17, 2022
@gitpod-io
Copy link
Copy Markdown

gitpod-io bot commented Mar 17, 2022

@github-actions github-actions bot added the package/tools Related to AWS CDK Tools or CLI label Mar 17, 2022
@mergify mergify bot added the contribution/core This is a PR that came from AWS. label Mar 17, 2022
@RomainMuller RomainMuller added pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes labels Mar 17, 2022
Co-authored-by: Romain Marcadier <rmuller@amazon.com>
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Mar 17, 2022

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify mergify bot merged commit 49ea263 into master Mar 18, 2022
@mergify mergify bot deleted the huijbers/bootstrap-ecr-policy branch March 18, 2022 12:06
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Mar 18, 2022

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Copy Markdown
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
  • Commit ID: d6e1fcc
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

contribution/core This is a PR that came from AWS. package/tools Related to AWS CDK Tools or CLI pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

(bootstrap): Bootstrapping with CDK v1.139.0 removes IAM policy from the ECR asset repository

3 participants