failed to digest image on create

[boskiv]

Creating from config file raise a warning:

❯ kops update cluster --name k8s.kops.uat.aws.spreadfighter.cloud --yes
W0720 15:16:52.787199   32177 builder.go:230] failed to digest image "602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni:v1.12.6"
W0720 15:16:54.362877   32177 builder.go:230] failed to digest image "602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.12.6"
...
W0720 15:17:02.831714   32177 pruning.go:115] manifest includes an object of GroupKind Secret, which will not be pruned
I0720 15:17:21.882921   32177 executor.go:111] Tasks: 0 done / 115 total; 56 can run
W0720 15:17:23.619128   32177 vfs_keystorereader.go:143] CA private key was not found
I0720 15:17:23.913374   32177 keypair.go:226] Issuing new certificate: "etcd-clients-ca"
I0720 15:17:23.952844   32177 keypair.go:226] Issuing new certificate: "etcd-manager-ca-main"
I0720 15:17:23.952906   32177 keypair.go:226] Issuing new certificate: "etcd-manager-ca-events"
I0720 15:17:23.953548   32177 keypair.go:226] Issuing new certificate: "etcd-peers-ca-events"
I0720 15:17:23.994249   32177 keypair.go:226] Issuing new certificate: "etcd-peers-ca-main"
I0720 15:17:23.994252   32177 keypair.go:226] Issuing new certificate: "apiserver-aggregator-ca"
W0720 15:17:24.297745   32177 vfs_keystorereader.go:143] CA private key was not found
I0720 15:17:24.619882   32177 keypair.go:226] Issuing new certificate: "service-account"
I0720 15:17:24.638874   32177 keypair.go:226] Issuing new certificate: "kubernetes-ca"
I0720 15:17:30.262619   32177 executor.go:111] Tasks: 56 done / 115 total; 25 can run
I0720 15:17:34.300122   32177 executor.go:111] Tasks: 81 done / 115 total; 28 can run
I0720 15:17:38.420447   32177 executor.go:111] Tasks: 109 done / 115 total; 3 can run
I0720 15:17:41.779676   32177 executor.go:111] Tasks: 112 done / 115 total; 3 can run
I0720 15:17:42.561404   32177 executor.go:111] Tasks: 115 done / 115 total; 0 can run
I0720 15:17:43.849953   32177 dns.go:236] Pre-creating DNS records
I0720 15:17:44.424683   32177 update_cluster.go:323] Exporting kubeconfig for cluster
kOps has set your kubectl context to k8s.kops.uat.aws.spreadfighter.cloud
W0720 15:17:44.775903   32177 update_cluster.go:348] Exported kubeconfig with no user authentication; use --admin, --user or --auth-plugin flags with `kops export kubeconfig`

[hakman]

This is expected. Try to configure Docker with:

{
    "credsStore":"ecr-login"
}

and make sure you export your AWS credentials:

export AWS_SECRET_ACCESS_KEY=...
export AWS_ACCESS_KEY_ID=...
export AWS_DEFAULT_REGION=...