Kubernetes Cookbook - Second Edition

Using Amazon elastic container registry

Amazon elastic container registry (ECR) was introduced as a part of Amazon elastic container service (ECS). This recipe won't touch on ECS itself; instead, just use ECR as a private registry.

In order to use Amazon ECR, you have to have an AWS account and install AWS CLI on your machine. It will be described in more detail in Chapter 6, Building Kubernetes on AWS. You'll have to create an IAM user with ACCESS KEY ID and SECRET ACCESS KEY, and associated AmazonEC2ContainerRegistryFullAccess policies, which allow full administrator access to Amazon ECR:

{  "Version": "2012-10-17",  "Statement": [    {      "Effect": "Allow",      "Action": [        "ecr:*"      ],      "Resource": "*"    }  ]}

Then configure the default settings in AWS ...