From 20e4bcb45eb223cd1fa9ded67a19ebb097771e43 Mon Sep 17 00:00:00 2001
From: "Matthew C. Morgan" <matthew.c.morgan@census.gov>
Date: Sun, 20 Apr 2025 16:52:10 -0400
Subject: [PATCH] source and dest creds

---
 copy_images.tf | 63 ++++++++++++++++++++++++++------------------------
 1 file changed, 33 insertions(+), 30 deletions(-)

diff --git a/copy_images.tf b/copy_images.tf
index 1888004..411dc4f 100644
--- a/copy_images.tf
+++ b/copy_images.tf
@@ -7,37 +7,43 @@ locals {
 
   image_config = [
     {
-      enabled         = true
-      dest_path       = null
-      name            = "keycloak/keycloak"
-      source_image    = "keycloak/keycloak"
-      source_registry = format("%v/%v", local.ent_ecr_source, "quay")
-      source_tag      = var.keycloak_tag
-      tag             = var.keycloak_tag
-      source_username = data.aws_ecr_authorization_token.ecr_token.user_name
-      source_password = data.aws_ecr_authorization_token.ecr_token.password
+      enabled              = true
+      dest_path            = null
+      name                 = "keycloak/keycloak"
+      source_image         = "keycloak/keycloak"
+      source_registry      = format("%v/%v", local.ent_ecr_source, "quay")
+      source_tag           = var.keycloak_tag
+      tag                  = var.keycloak_tag
+      source_username      = data.aws_ecr_authorization_token.ecr_token.user_name
+      source_password      = data.aws_ecr_authorization_token.ecr_token.password
+      destination_username = data.aws_ecr_authorization_token.token.user_name
+      destination_password = data.aws_ecr_authorization_token.token.password
     },
     {
-      enabled         = true
-      dest_path       = null
-      name            = "bitnami/postgresql"
-      source_image    = "bitnami/postgresql"
-      source_registry = "public.ecr.aws"
-      source_tag      = var.postgresql_tag
-      tag             = var.postgresql_tag
-      source_username = data.aws_ecr_authorization_token.token.user_name
-      source_password = data.aws_ecr_authorization_token.token.password
+      enabled              = true
+      dest_path            = null
+      name                 = "bitnami/postgresql"
+      source_image         = "bitnami/postgresql"
+      source_registry      = "public.ecr.aws"
+      source_tag           = var.postgresql_tag
+      tag                  = var.postgresql_tag
+      source_username      = data.aws_ecr_authorization_token.token.user_name
+      source_password      = data.aws_ecr_authorization_token.token.password
+      destination_username = data.aws_ecr_authorization_token.token.user_name
+      destination_password = data.aws_ecr_authorization_token.token.password
     },
     {
-      enabled         = true
-      dest_path       = null
-      name            = "bitnami/kubectl-debian"
-      source_image    = "big-bang/utilities"
-      source_registry = format("%v/%v", local.ent_ecr_source, "ironbank")
-      source_tag      = var.utilities_tag
-      tag             = var.utilities_tag
-      source_username = data.aws_ecr_authorization_token.ecr_token.user_name
-      source_password = data.aws_ecr_authorization_token.ecr_token.password
+      enabled              = true
+      dest_path            = null
+      name                 = "bitnami/kubectl-debian"
+      source_image         = "big-bang/utilities"
+      source_registry      = format("%v/%v", local.ent_ecr_source, "ironbank")
+      source_tag           = var.utilities_tag
+      tag                  = var.utilities_tag
+      source_username      = data.aws_ecr_authorization_token.ecr_token.user_name
+      source_password      = data.aws_ecr_authorization_token.ecr_token.password
+      destination_username = data.aws_ecr_authorization_token.token.user_name
+      destination_password = data.aws_ecr_authorization_token.token.password
     },
   ]
 }
@@ -54,9 +60,6 @@ module "images" {
   lifecycle_policy_all        = true
   force_delete                = true
   lifecycle_policy_keep_count = 5
-
-  destination_username = data.aws_ecr_authorization_token.token.user_name
-  destination_password = data.aws_ecr_authorization_token.token.password
 }
 
 data "aws_ecr_authorization_token" "token" {