ECR (not ECR Public) repository for EKS-D images
- Dominant language
- Shell
- Stars
- 1.5k
- Forks
- 198
- Avg merge
- 10h 46m
- Merged PRs (30d)
- 28
Description
**What would you like to be added**:
A documented ECR (not ECR Public) repository for all EKS-D components, similar to those documented for AWS VPC CNI driver, EFS CSI driver, kube-proxy, coredns, etc.
**Why is this needed**:
Sometimes it's desired to run components from EKS-D in-cluster, for example to run `kube-scheduler` with a different configuration than EKS uses. Because the images are hosted on ECR Public, which has no VPC endpoints and uses CloudFront for serving layers, doing this on a private cluster requires using workarounds such as mirroring the image into an ECR repository that the cluster can safely access. ECR Pull-Through Cache does not currently work on private clusters with restricted Internet access either, and anyway isn't suitable for all use cases.
Other EKS components do not run into this issue because they provide well-known ECR repositories from which the images can be pulled directly, e.g.
```
602401143452.dkr.ecr.$REGION.amazonaws.com/eks/kube-proxy:$TAG
602401143452.dkr.ecr.$REGION.amazonaws.com/eks/coredns:$TAG
602401143452.dkr.ecr.$REGION.amazonaws.com/eks/aws-efs-csi-driver:$TAG
602401143452.dkr.ecr.$REGION.amazonaws.com/amazon-k8s-cni:$TAG
```
(The account ID is usually `602401143452` but [differs for some regions](https://docs.aws.amazon.com/eks/latest/userguide/add-ons-images.html).)
If other EKS components are in fact already available under `602401143452.dkr.ecr.$REGION.amazonaws.com/eks/`, it would be great to document this.
Contributor guide
Assessment
This issue has not been assessed yet.