Join Log in
Score:0
serhatbalik avatar Server

Configure EKS to use Nexus Private Docker Registry (HTTP/HTTPS)

id flag
serhatbalik

I've created an EKS cluster on AWS along with Nexus Repository on DigitalOcean using Terraform & Ansible.

Also I've not created any SSL for the Nexus Repository, so it is "http."

Normally, it is sufficient to add [insecure-registries:...] entry into the self hosted nodes' docker config file, but I am working with EKS the first time and I don't have any access to configuration of the worker nodes, because they are inside private subnets.

How can I achieve the same thing while using EKS? Because I get the error below when I am trying to pull an image from that Nexus Repo. I've tried creating docker registy secret with the --insecure-skip-tls-verify and passing it with the POD yml, but had no success with it.

Failed to pull image "164.XX.XX.XX:8083/checkoutservice:latest": rpc error: code = Unknown desc = Error response from daemon: Get "https://164.XX.XX.XX:8083/v2/": http: server gave HTTP response to HTTPS client

UPDATE-1: Okay, I've managed to install nginx as a reverse proxy on Nexus server and created an SSL for it. The problem is now how to make EKS resolve that domain name. I tried changing the configmap of core-dns pods, but no success so far. Do you have any suggestions?

UPDATE-2: Situation is resolved. I needed to create a Bastion server in the public subnets, SSH into Worker Nodes and import CA of my self-signed Nexus server certificate into /etc/ssl/certs/ and modify /etc/hosts file with the relevant domain name, then restart docker.

31
0 + 0
eks
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.