# ALL the accounts that will be granted access to the ECR repository. 
# ECR does not support edit the policy of a repository so be sure to include all the allow-listed accounts here.
accountArns:
# The account has to exist otherwise AWS will throw an error saying the policy is invalid
- "arn:aws:iam::${account1}:root"
- "arn:aws:iam::${account2}:root"
repositories:
- cert-manager-cainjector
- mysqlclient
- tidb-monitor-initializer
- cert-manager-webhook
- pd
- sli-reporter
- csi-attacher
- tidb-monitor-reloader
- advanced-statefulset
- tidb
- csi-resizer
- busybox
- br
- tidb-backup-manager
- tikv
- csi-provisioner
- grafana
- tidb-operator
- cert-manager-ctl
- cert-manager
- aws-pca-issuer
- livenessprobe
- prometheus
- gotty
- csi-node-driver-registrar
- lightning
- tidb-lightning
- cluster-proxy