AWS ECS Fargate | Images from Private Gitlab Registry

0

Hello

We have a private Gitlab deployment running on EC2 instances which hosts our container registry in a private subnet. We want to setup ECS Fargate and the tasks execution is returning unable to resolve gitlab.company.com. Is it possible for Fargate to pull images from private registries that are running in local/private networks?

Thanks

已提問 1 年前檢視次數 933 次
2 個答案
0

Fargate is also recognized for use in private registries.
https://aws.amazon.com/jp/blogs/compute/introducing-private-registry-authentication-support-for-aws-fargate/

I thought "extra_hosts" in the following document might be relevant, since it seems that name resolution is not working.
https://github.com/ayufan/gitlab-ci-multi-runner/blob/master/docs/configuration/advanced-configuration.md

profile picture
專家
已回答 1 年前
  • Thanks for the response. The article explains how we can setup private registries but does not provide any details if the registry can be in private network. extra_hosts variable seems to be container variable. My understanding is that the fargate host first pulls the image from the registry and then spins up the container, this variable comes into effect when the container is started. (I could be wrong). There might be a way to have the manipulate fargate hosts so it can talk to private registry on a private network. Maybe using private link but I am not sure if thats the right path. Thoughts?

0

Hello Abdul,

Thank you for using AWS services.

Have you tried using VPC Endpoint ? I've recently experimented similar use-case to pull an image from Private ECR to my ECS Cluster, i was able to do so using the VPC Endpoint (My ECS Cluster was provisioned with Fargate as capacity Provider). While creating the VPCEndpoint, please make sure to enable Private DNS Name.

Reference: https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-endpoints.html

AWS
已回答 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南