AWS Registry Configuration

Configure your cluster to use an existing local registry when attempting to pull images by adding the flag(s) to the dkp create cluster command to pull images from your local registry.

If you set the --registry-mirror flag during cluster creation, the Kubelet will now send to requests to the dynamic-credential-provider with a different config. Only use one image registry per cluster.

To apply private registry configurations during the dkp cluster create operation, add the appropriate flags to the command:

Registry configuration	Flag
CA certificate chain to use while communicating with the registry mirror using Transport Layer Security(TLS)	`--registry-mirror-cacert file`
URL of a container registry to use as a mirror in the cluster	`--registry-mirror-url string` OR apply variable `${REGISTRY_URL}`
Set to a user that has pull access to this registry	`--registry-mirror-username string` OR apply variable `${REGISTRY_USERNAME}`
Password to authenticate the registry mirror	`--registry-mirror-password string` OR apply variable `${REGISTRY_PASSWORD}`

This is useful when using an internal registry and when Internet access is not available such as in an air-gapped environment. However, registry mirrors can be used in non-air-gapped environments as well for security and speed.

AWS ECR - Adding the mirror flags to EKS would enable new clusters to also use ECR as image mirror. If you set the --registry-mirror flag, the Kubelet will now send to requests to the dynamic-credential-provider with a different config. You can still pull your own images from ECR directly or use ECR as a mirror.

When the cluster is up and running, you can deploy and test workloads.

Registry Mirror Cluster Example

Selecting your provider, run:

CODE

dkp create cluster [aws, azure, gcp, preprovisoned, vsphere] \
    --cluster-name=${CLUSTER_NAME} \
    --registry-mirror-cacert /tmp/registry.pem \
    --registry-mirror-url=${REGISTRY_URL}

More information is found in the Custom Installation and Additional Infrastructure Tools sections under the Create a New Cluster section of each Infrastructure Provider. Mirrors can be used in both air-gapped and non-air-gapped environments by adding the flag to the dkp create cluster command.

Next Topic

AWS HTTP Proxy

If none of the customizations apply, continue to installation instructions for your environment: