{"action":"closed","issue":{"url":"https://api.github.com/repos/ministryofjustice/cloud-platform/issues/411","repository_url":"https://api.github.com/repos/ministryofjustice/cloud-platform","labels_url":"https://api.github.com/repos/ministryofjustice/cloud-platform/issues/411/labels{/name}","comments_url":"https://api.github.com/repos/ministryofjustice/cloud-platform/issues/411/comments","events_url":"https://api.github.com/repos/ministryofjustice/cloud-platform/issues/411/events","html_url":"https://github.com/ministryofjustice/cloud-platform/issues/411","id":365430198,"node_id":"MDU6SXNzdWUzNjU0MzAxOTg=","number":411,"title":"Change the ECR user auth","user":{"login":"jasonBirchall","id":31217584,"node_id":"MDQ6VXNlcjMxMjE3NTg0","avatar_url":"https://avatars1.githubusercontent.com/u/31217584?v=4","gravatar_id":"","url":"https://api.github.com/users/jasonBirchall","html_url":"https://github.com/jasonBirchall","followers_url":"https://api.github.com/users/jasonBirchall/followers","following_url":"https://api.github.com/users/jasonBirchall/following{/other_user}","gists_url":"https://api.github.com/users/jasonBirchall/gists{/gist_id}","starred_url":"https://api.github.com/users/jasonBirchall/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jasonBirchall/subscriptions","organizations_url":"https://api.github.com/users/jasonBirchall/orgs","repos_url":"https://api.github.com/users/jasonBirchall/repos","events_url":"https://api.github.com/users/jasonBirchall/events{/privacy}","received_events_url":"https://api.github.com/users/jasonBirchall/received_events","type":"User","site_admin":false},"labels":[{"id":932424361,"node_id":"MDU6TGFiZWw5MzI0MjQzNjE=","url":"https://api.github.com/repos/ministryofjustice/cloud-platform/labels/in%20progress","name":"in progress","color":"ededed","default":false},{"id":1011380077,"node_id":"MDU6TGFiZWwxMDExMzgwMDc3","url":"https://api.github.com/repos/ministryofjustice/cloud-platform/labels/user%20feedback","name":"user feedback","color":"5b138e","default":false}],"state":"closed","locked":false,"assignee":{"login":"razvan-moj","id":36888774,"node_id":"MDQ6VXNlcjM2ODg4Nzc0","avatar_url":"https://avatars0.githubusercontent.com/u/36888774?v=4","gravatar_id":"","url":"https://api.github.com/users/razvan-moj","html_url":"https://github.com/razvan-moj","followers_url":"https://api.github.com/users/razvan-moj/followers","following_url":"https://api.github.com/users/razvan-moj/following{/other_user}","gists_url":"https://api.github.com/users/razvan-moj/gists{/gist_id}","starred_url":"https://api.github.com/users/razvan-moj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/razvan-moj/subscriptions","organizations_url":"https://api.github.com/users/razvan-moj/orgs","repos_url":"https://api.github.com/users/razvan-moj/repos","events_url":"https://api.github.com/users/razvan-moj/events{/privacy}","received_events_url":"https://api.github.com/users/razvan-moj/received_events","type":"User","site_admin":false},"assignees":[{"login":"razvan-moj","id":36888774,"node_id":"MDQ6VXNlcjM2ODg4Nzc0","avatar_url":"https://avatars0.githubusercontent.com/u/36888774?v=4","gravatar_id":"","url":"https://api.github.com/users/razvan-moj","html_url":"https://github.com/razvan-moj","followers_url":"https://api.github.com/users/razvan-moj/followers","following_url":"https://api.github.com/users/razvan-moj/following{/other_user}","gists_url":"https://api.github.com/users/razvan-moj/gists{/gist_id}","starred_url":"https://api.github.com/users/razvan-moj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/razvan-moj/subscriptions","organizations_url":"https://api.github.com/users/razvan-moj/orgs","repos_url":"https://api.github.com/users/razvan-moj/repos","events_url":"https://api.github.com/users/razvan-moj/events{/privacy}","received_events_url":"https://api.github.com/users/razvan-moj/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2018-10-01T12:05:24Z","updated_at":"2018-11-29T10:24:02Z","closed_at":"2018-11-29T10:24:02Z","author_association":"CONTRIBUTOR","body":"BACKGROUND: \nOne of the Cloud-Platform users has pointed out an issue with the creation of an ECR user account per repository (01/10):\n`AlD [11:49]\nmorning all. I have a question on the ECR terraform module (https://github.com/ministryofjustice/cloud-platform-terraform-ecr-credentials) - our system consists of a growing number of containers (5 so far, 2 more coming soon, maybe more later). If I’m reading the TF code correctly, the module will create a distinct user with new credentials for each one (so 7 sets of credentials to manage in our case). Is that right? Is there a way to use the same credentials across a set of repos?`\n\nThis is a very good point. If you split your application into micro-services you may have to handle multiple user-accounts. This is less than ideal. Should we have an ecr-user created per repository that has access to project/*.\n\nPROPOSED USER JOURNEY:\nAs a user I need to provision ECR for a user at team level so I only need to manage one set of credentials for multiple images.\n\nAPPROACH:\n\n**We can test with Al Davidson who has identified this user need.**\n\nWHICH PART OF THE USER DOCS DOES THIS IMPACT:\n\nThis will require a new section in the user guide in line with other Terraform Modules. **However, note that there is another story in this sprint (#insert ref) to revisit where we keep guidance for Terraform Modules. You may want to hold off on documents until that work is completed.** \n\nQUESTIONS/ASSUMPTIONS:\n\nDEFINITION OF DONE:\n- [ ] Module created\n- [ ] Test with user\n- [ ] There is a new repo for the module called with a sensible name in line with our naming conventions.\n- [ ] Any tags applied according to the tag guidance\n- [ ] Add the readme like in the S3 bucket module\n- [ ] Updated user guide"}}
{"actor":{"display_login":"razvan-moj"}}