templates(al2): use ecr-credential-provider for public.ecr.aws in 1.27+

awslabs · Sep 4, 2024 · e14905d · e14905d
1 parent 3c822f5
commit e14905d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/templates/al2/provisioners/install-worker.sh b/templates/al2/provisioners/install-worker.sh
@@ -379,6 +379,11 @@ fi
 sudo chmod +x $ECR_CREDENTIAL_PROVIDER_BINARY
 sudo mkdir -p /etc/eks/image-credential-provider
 sudo mv $ECR_CREDENTIAL_PROVIDER_BINARY /etc/eks/image-credential-provider/
+# ecr-credential-provider has support for public.ecr.aws in 1.27+
+if vercmp "${KUBERNETES_VERSION}" gteq "1.27.0"; then
+  ECR_CRED_PROVIDER_CONFIG_WITH_PUBLIC=$(cat $WORKING_DIR/ecr-credential-provider-config.json | jq '.providers[0].matchImages += ["public.ecr.aws"]')
+  echo "${ECR_CRED_PROVIDER_CONFIG_WITH_PUBLIC}" > $WORKING_DIR/ecr-credential-provider-config.json
+fi
 sudo mv $WORKING_DIR/ecr-credential-provider-config.json /etc/eks/image-credential-provider/config.json
 
 ################################################################################