Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

models, containerd, ecs-agent, host-ctr: support registry credentials #1955

Merged
merged 6 commits into from
Mar 7, 2022
Merged

models, containerd, ecs-agent, host-ctr: support registry credentials #1955

merged 6 commits into from
Mar 7, 2022

Commits on Mar 5, 2022

  1. models, containerd, ecs-agent: add 'container-registry.credentials' 

    This adds support for configuring registry auth credentials when pulling
images. The setting is used to render containerd, ecs-agent
configuration to enable authenticated pulls with the configured auth
information.
    @etungsten
    etungsten committed Mar 5, 2022
    Configuration menu
    Copy the full SHA
    a185b30 View commit details
    Browse the repository at this point in the history

  2. host-ctr: move registryHosts to the registry pkg

    @etungsten
    etungsten committed Mar 5, 2022
    Configuration menu
    Copy the full SHA
    068bb47 View commit details
    Browse the repository at this point in the history

  3. host-ctr: configure resolver's registry auth based on registry config 

    host-ctr will set up the custom resolver's authorizer based on the
registry credentials information stored in host-ctr.toml.
    @etungsten
    etungsten committed Mar 5, 2022
    Configuration menu
    Copy the full SHA
    3d7b770 View commit details
    Browse the repository at this point in the history

  4. ecs-agent, host-ctr, containerd: add mount units for configuration di… 

    …rectories

containerd,ecs-agent,host-ctr: add context to configuration directory mounts

We set selinux labels to the mount options so that under-privileged
processes won't be able to read registry credential secrets from the
container runtime configuration files.
    @etungsten
    etungsten committed Mar 5, 2022
    Configuration menu
    Copy the full SHA
    b70f945 View commit details
    Browse the repository at this point in the history

  5. README: add info about "settings.container-registry.credentials"

    @etungsten
    etungsten committed Mar 5, 2022
    Configuration menu
    Copy the full SHA
    20a7ddd View commit details
    Browse the repository at this point in the history

  6. migrations: add migrations for 'settings.container-registry.credentials'

    @etungsten
    etungsten committed Mar 5, 2022
    Configuration menu
    Copy the full SHA
    6f59a59 View commit details
    Browse the repository at this point in the history