#9267 [AWS] Need read-only API key for ec2 DescribeImages
Closed: Fixed 3 years ago by kevin. Opened 3 years ago by codeblock.

Describe what you would like us to do:

I'd like to move the cloud images website (alt.fp.o/cloud) away from datagrepper for finding our latest AMIs, to just querying AWS directly instead.

This is because using datagrepper requires a ton of (very slow) requests, meaning the website is very slow to build (which is painful for contributors).

To work around this, I plan to use the AWS API to pull the latest list of images that Fedora owns and generate a file (during the production web build) that has those AMI IDs in it. Then the website build can just download and parse that file and avoid datagrepper entirely.

To make this work, I need read-only API access to DescribeImages with a key that can safely live in an OpenShift secret/env var.

When do you need this to be done by? (YYYY/MM/DD)

Non-urgent, but blocks moving alt.fp.o -> getfedora.


Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: medium-gain, medium-trouble, ops

3 years ago

Done. I put the info in private in vars.yml...

Let us know if you need any more perms that describeimages.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Done