Support for Logon to Amazon EC2 Container Registry

[ansibot]

From @osiegmar on 2016-10-16T15:34:56Z

ISSUE TYPE

• Feature Idea

COMPONENT NAME

docker_login

ANSIBLE VERSION

2.1.1.0

SUMMARY

As far as I know, the only way to logon to (and pull docker images from / push to) Amazon ECR is via the shell module. It would be nice if the docker_login module supports logon to ECR so that further ansible docker tasks can directly work with ECR.

This is how I handle this currently:

- name: ECR login
  shell: "$(aws ecr get-login --region eu-central-1)"
- name: Pull image from ECR
  shell: "docker pull myid.dkr.ecr.eu-central-1.amazonaws.com/my-app:latest"

The output from aws ecr get-login is:

docker login -u AWS -p [VERY-LONG-PASSWORD] -e none https://myid.dkr.ecr.eu-central-1.amazonaws.com

The generated password is valid for 12 hours.

Of course, I could use awk to get the password from the output and then use docker_login. But the output format may change...

Copied from original issue: ansible/ansible-modules-core#5277

[ansibot]

From @ansibot on 2016-10-16T15:34:56Z

@olsaki ping, this issue is waiting for your response.
click here for bot help

[ansibot]

From @leedm777 on 2016-10-16T15:34:56Z

@osiegmar Have you tried amazon-ecr-credential-helper?

[ansibot]

cc @jctanner
click here for bot help

[alexfoxgill]

Of course, I could use awk to get the password from the output and then use docker_login. But the output format may change...

you can use get-authorization-token with a query specifier to get the result that you want:

aws ecr get-authorization-token --region eu-west-1 --query 'authorizationData[].authorizationToken' --output text | base64 --decode | cut -d: -f2

(the result is returned base64 encoded with a AWS: prefix, hence the two piped commands)

[ansibot]

cc @chouseknecht
click here for bot help

[ansibot]

cc @felixfontein
click here for bot help

[ansibot]

cc @akshay196 @danihodovic @dariko @jwitko @kassiansun @tbouvet
click here for bot help

[felixfontein]

needs_contributor

[ansibot]

cc @DBendit
click here for bot help

[ansibot]

cc @acozine
click here for bot help

[ansibot]

cc @WojciechowskiPiotr
click here for bot help

[felixfontein]

Hello all! There's a PR which should fix this if used with https://github.com/awslabs/amazon-ecr-credential-helper (or some other credential helper for Amazon ECR, if there's one): #63158

Could you please give it a try and see whether it works for you?