Deploy the docker-registry-mirror helm chart on AWS EKS

Question

Pulumi · Accepted Answer

To deploy the Docker Registry Mirror Helm chart on an Amazon EKS cluster, you'll need to perform several steps:

Set up an AWS EKS cluster.
Create an ECR (Elastic Container Registry) repository to store your container images.
Install the Helm CLI on your workstation.
Use Helm to deploy the Docker Registry Mirror Helm chart on your EKS cluster.

I'll guide you through a Pulumi program in TypeScript that sets up an EKS cluster and an ECR repository. Note that the actual deployment of the Helm chart is typically done from a command-line environment with Helm installed, but Pulumi can also handle Helm chart deployments.

The following Pulumi program shows how to create an EKS cluster using the high-level eks.Cluster component. It then demonstrates how to create an ECR repository with aws.ecr.Repository. This example doesn't include the Helm chart deployment, but once the cluster and the ECR repository are set up, you would use Helm to install the Docker Registry Mirror.

Remember to have AWS credentials configured in your environment, as well as to have Pulumi installed and set up.

Now let's walk through the program:

import * as eks from "@pulumi/eks";
import * as aws from "@pulumi/aws";

// Create an EKS cluster.
const cluster = new eks.Cluster("my-cluster", {
    // Specify the desired settings for the cluster.
    desiredCapacity: 2,
    minSize: 1,
    maxSize: 2,
    storageClasses: "gp2", // Set the default storage class as gp2.
    deployDashboard: false, // Skip deploying the Kubernetes dashboard.
});

// Export the cluster's kubeconfig.
export const kubeconfig = cluster.kubeconfig;

// Create an ECR repository to store Docker images.
const repository = new aws.ecr.Repository("my-registry", {
    // Repository settings can be adjusted here.
    imageScanningConfiguration: {
        scanOnPush: true,
    },
    imageTagMutability: "MUTABLE",
});

// Export the repository URL to push images.
export const repositoryUrl = repository.repositoryUrl;

/*
At this point, the EKS cluster and ECR repository are ready.
To deploy the Docker Registry Mirror Helm chart, you would do something like this:

1. Configure your local machine's Kubernetes configuration (`~/.kube/config`)
   with the kubeconfig obtained from the cluster.kubeconfig.

2. Install Helm on your local machine (if not already installed).

3. Use Helm to deploy your Docker Registry Mirror Helm chart:

helm repo add stable https://kubernetes-charts.storage.googleapis.com/ helm install my-docker-mirror stable/docker-registry
--set mirror.url="https://<region>.ecr.<your-aws-account-id>.amazonaws.com"
--set mirror.cache=true

Replace the `mirror.url` with the actual repository URL you obtained above.
*/

Things to Keep in Mind:

Ensure that the Helm chart values (like mirror.url, and any other settings) match the desired state of your Docker Registry Mirror.
Remember to use pulumi up to apply the changes and create these resources in AWS.
Securing your EKS cluster or ECR repository with appropriate IAM roles and policies is critical but is beyond this particular example.

This program initializes the EKS cluster and the ECR repository. After running this Pulumi program, you will follow the commented steps at the end of the program to deploy the Docker Registry Mirror using Helm.

There is more to managing a Docker Registry Mirror, including setting up IAM permissions properly, enabling security scanning, and setting up logging and monitoring, which are not covered here. These are advanced topics that you might want to explore as you become more comfortable with Kubernetes and AWS.

Remember, infrastructure as code with Pulumi is powerful, and you can automate nearly the entire workflow. Here, we kept it simple to focus on the initial deployment.