Adi Gandra
01/24/2022, 6:21 AMMessage: Failed to pull image "<http://z.dkr.ecr.us-east-1.amazonaws.com/r:latest|z.dkr.ecr.us-east-1.amazonaws.com/r:latest>": rpc error: code = NotFound desc = failed to pull and unpack image "<http://z.dkr.ecr.us-east-1.amazonaws.com/r:latest|z.dkr.ecr.us-east-1.amazonaws.com/r:latest>": failed to resolve reference "<http://z.dkr.ecr.us-east-1.amazonaws.com/r:latest|z.dkr.ecr.us-east-1.amazonaws.com/r:latest>": <http://z.dkr.ecr.us-east-1.amazonaws.com/r:latest|z.dkr.ecr.us-east-1.amazonaws.com/r:latest>: not found
I have followed the tutorial pretty closely, although some stuff what slightly outdated so I used the newer paradigms that were introduced. Any insight on how I could configure my EKS to be able to pull images from the ECR would be appreciated. I also did all of this on my master admin account, so I would think that permissions shouldn’t be an issueAnna Geller
eksctl get fargateprofile --cluster your_cluster_name -o yaml
You should get info about which podExecutionRoleARN is used and you can check in your IAM console what permissions are attached, and if ECR is missing, perhaps you can add it?
Still weird, ECR permission is granted by default, do you happen to use a different region in your ECR image as opposed to the region of the cluster?Adi Gandra
01/24/2022, 1:34 PMAnna Geller
Adi Gandra
01/24/2022, 1:41 PM{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecr:BatchCheckLayerAvailability",
"ecr:BatchGetImage",
"ecr:GetDownloadUrlForLayer",
"ecr:GetAuthorizationToken"
],
"Resource": "*"
}
]
}
Anna Geller
"ecr:GetAuthorizationToken",
"ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer",
"ecr:GetRepositoryPolicy",
"ecr:DescribeRepositories",
"ecr:ListImages",
"ecr:DescribeImages",
"ecr:BatchGetImage",
"ecr:GetLifecyclePolicy",
"ecr:GetLifecyclePolicyPreview",
"ecr:ListTagsForResource",
"ecr:DescribeImageScanFindings"
how did you create your cluster? Was your fargate profile created automatically or manually?Adi Gandra
01/24/2022, 2:07 PMAnna Geller
Adi Gandra
01/24/2022, 2:08 PMAnna Geller
Adi Gandra
01/24/2022, 4:16 PM