Maciej Bukczynski
09/05/2024, 6:27 AMMarvin
09/05/2024, 6:27 AMMaciej Bukczynski
09/05/2024, 6:27 AMMarvin
09/05/2024, 6:28 AMecr:CreateRepository
- ecr:DescribeRepositories
- ecr:GetAuthorizationToken
- You can use AWS managed policies like AmazonECS_FullAccess
, AmazonEC2FullAccess
, IAMFullAccess
, and AmazonEC2ContainerRegistryFullAccess
.
2. Provision Infrastructure:
shell
prefect work-pool create --type ecs:push --provision-infra my-ecs-pool
This command sets up your AWS account to execute flows with ECS tasks, creating the necessary ECS cluster, VPC, and ECR repository if they don't already exist.
Links to docs for managing identity and required configurations:
- Prefect Infrastructure Examples
### GitHub Issues (Pain Points)
1. ECR Registry Block:
There are unresolved issues where the ECR registry block
has failed due to a 404 Not authenticated
error on image pull. Evidently, private registries might have separate Docker clients that don't log in properly (GitHub Issue).
2. Too Many DockerHub Pull Requests:
DockerHub rate limits frequently cause failures:
plaintext
toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating.
(GitHub Issue)
3. Steps Non-functional:
Some deployment configurations might not render correctly, likely due to issues with prefect.yml
settings and pull_steps
(GitHub Issue).
Hopefully, that steers you clear of the abyss. For more details, consult the full documentation.