AWS ECS Fargate | Images from Private Gitlab Registry

0

Hello

We have a private Gitlab deployment running on EC2 instances which hosts our container registry in a private subnet. We want to setup ECS Fargate and the tasks execution is returning unable to resolve gitlab.company.com. Is it possible for Fargate to pull images from private registries that are running in local/private networks?

Thanks

已提问 1 年前912 查看次数
2 回答
0

Fargate is also recognized for use in private registries.
https://aws.amazon.com/jp/blogs/compute/introducing-private-registry-authentication-support-for-aws-fargate/

I thought "extra_hosts" in the following document might be relevant, since it seems that name resolution is not working.
https://github.com/ayufan/gitlab-ci-multi-runner/blob/master/docs/configuration/advanced-configuration.md

profile picture
专家
已回答 1 年前
  • Thanks for the response. The article explains how we can setup private registries but does not provide any details if the registry can be in private network. extra_hosts variable seems to be container variable. My understanding is that the fargate host first pulls the image from the registry and then spins up the container, this variable comes into effect when the container is started. (I could be wrong). There might be a way to have the manipulate fargate hosts so it can talk to private registry on a private network. Maybe using private link but I am not sure if thats the right path. Thoughts?

0

Hello Abdul,

Thank you for using AWS services.

Have you tried using VPC Endpoint ? I've recently experimented similar use-case to pull an image from Private ECR to my ECS Cluster, i was able to do so using the VPC Endpoint (My ECS Cluster was provisioned with Fargate as capacity Provider). While creating the VPCEndpoint, please make sure to enable Private DNS Name.

Reference: https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-endpoints.html

AWS
已回答 1 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则