search

aws-samples / aws-iam-ra-for-kubernetes

MIT No Attribution
26 stars 5 forks source link

Question about node authentication for pulling image from private ECR registry #2

Open maxmele opened 3 months ago

maxmele commented 3 months ago

Hello,

First, thank you for providing this guide on implementing AWS roles anywhere with HashiCorp Vault. I think it is a really interesting solution that can help us a lot in our company. However, there is one thing I don't understand.

The authentication process to AWS is handled within the init container itself. However, I noticed that the init container uses an image hosted in a private ECR registry. Since the cluster is outside AWS, how does the kubelet of the node authenticate to AWS to pull the init container image from the private ECR registry?

Thanks in advance,

likku123 commented 2 months ago

I believe one has to make this image public in your respective aws account.