mirrors/talos-extensions
1
0
Fork 0
mirror of https://github.com/siderolabs/extensions.git synced 2025-08-07 06:47:17 +02:00
Code Issues Packages Projects Releases Wiki Activity
056e5a831a
talos-extensions/container-runtime/ecr-credential-provider
History
Ströger Florian 2f8e401d21
feat: create 'ecr-credential-provider' extension 
Issue: https://github.com/siderolabs/extensions/issues/241
Signed-off-by: Ströger Florian <stroeger@youniqx.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-11-13 23:16:47 +05:30
..
manifest.yaml feat: create 'ecr-credential-provider' extension 2023-11-13 23:16:47 +05:30
pkg.yaml feat: create 'ecr-credential-provider' extension 2023-11-13 23:16:47 +05:30
README.md feat: create 'ecr-credential-provider' extension 2023-11-13 23:16:47 +05:30
vars.yaml feat: create 'ecr-credential-provider' extension 2023-11-13 23:16:47 +05:30

README.md

Kubelet ECR Credential Provider extension

This extension provides the ecr-credential-provider binary, which can be executed by Kubelet to provide a short-lived token for pulling container images from Amazon Web Services' Elastic Container Registry (ECR).

Installation

See Installing Extensions.

You also need to configure ecr-credential-provider as a Kubelet image credential provider. For this you'll need patch the machine config with the following:

machine:
  kubelet:
    credentialProviderConfig:
      apiVersion: kubelet.config.k8s.io/v1
      kind: CredentialProviderConfig
      providers:
        - name: ecr-credential-provider
          matchImages:
            - "*.dkr.ecr.*.amazonaws.com"
            - "*.dkr.ecr.*.amazonaws.com.cn"
            - "*.dkr.ecr-fips.*.amazonaws.com"
            - "*.dkr.ecr.us-iso-east-1.c2s.ic.gov"
            - "*.dkr.ecr.us-isob-east-1.sc2s.sgov.gov"
          defaultCacheDuration: "12h"
          apiVersion: credentialprovider.kubelet.k8s.io/v1

More Information