catalinpan / aws-ecr-proxy Goto Github PK

I am attempting to use this image to proxy our ECR with our docker.example.net DNS.

When I attempt to pull an image from my Mac OS X laptop through the proxy to ECR, I see the logs are giving me the following error:

2017/06/22 13:02:43 [error] 68#68 12345678901.dkr.ecr.us-east-1.amazonaws.com could not be resolved (110: Operation timed out), client 10.X.X.X, server: _, request: "GET /v2/ HTTP/1.1", host: "docker.example.net"
10.X.X.X - - [22/Jun/2017:13:02:43 +0000] "GET /v2/ HTTP/1.1" 502 173 "-" "docker/17.06.0-ce-rc5 go/go1.8.3 git-commit b7e4173 kernel/4.9.31-moby os/linux arch/amd64 UpstreamClient(Docker-Client/17.06.0-ce-rc5 \x5C(darwin\x5C))"

So it appears that we're getting a 502 status code attempting to contact our ECR.

** note: AWS account ID and IPs have been changed

PR incoming

The proxy works great on registry in a different account right after the start but as soon as the token is refreshed, the proxy requests are blocked by ECR with status code 400. There maybe in issue in the autoupdate script.

This is a great project but as an improvement it should be considered to use a process manager e.g supercvisor along with crond to run multiple scripts in reliable way. Let me know if the idea seems interesting I will be happy to contribute.

Add an option to pass in a registry id via environment variable. This would allow cross account access to the registries.