How to use Docker Image in ECR with AWS EKS

Question

I have created EKS Cluster. I also have docker image in ECR. I am not sure how to use the docker image in pod definition in YAML.

Is it required to give credentials in secret? or EKS IAM role should have permission for ECR?

Any changes in permission have to do for Image in ECR ?

score 32 · Accepted Answer · answered Jan 11 '19 at 10:24

32

If you followed the EKS getting started guide, everything will work out of the box and you just have to specify the the full image name (e.g. ACCOUNT.dkr.ecr.REGION.amazonaws.com/imagename:tag) in the Pod definition (spec.containers.image field).

It works because Kubernetes has native support for ECR and the CloudFormation template for the Kubernetes worker nodes attaches an AmazonEC2ContainerRegistryReadOnly policy to the instance profile.

answered Jan 11 '19 at 10:24

mrucci

4,052
3
29
33

This only works if the image is stored in a public ECR repository or am I missing something? – trallnag Jan 05 '21 at 15:49
2

That works for private ECR in the same account if the `AmazonEC2ContainerRegistryReadOnly` policy is attached to the worker nodes. – mrucci Jan 06 '21 at 12:26
Without creating and maintaining Kubernetes secrets? I have to take another look at it in that case, would make things easier – trallnag Jan 06 '21 at 12:44
2

No secrets involved. – mrucci Jan 08 '21 at 09:00

How to use Docker Image in ECR with AWS EKS

1 Answers1