mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-10-15 17:11:30 +00:00
57d0a3b813
The ecs-agent classified only *.dkr.ecr.* hosts as ECR, so a registry advertised as the gateway's bare host/IP pulled anonymously and 401'd. Recognise the agent's own gateway host as ECR and mint a token for it. The instance role — the pull's fallback credential when a task carries no execution role — granted ecs:* only; add ECR read so the pull authorizes.