https://pulumi.com logo
Title
a

agreeable-window-77899

03/23/2023, 9:15 AM
Hello Folks, I need some help setting up EKS cluster using Pulumi templates. I am using this EKS template from Pulumi to setup my cluster. But the pods in the cluster does not startup since it is not able to pull the
amazon-k8s-cni-init
container image from ECR. This is the exact error that is seen the pod
Failed to pull image "<http://602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0|602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0>": rpc error: code = Unknown desc = failed to pull and unpack image "<http://602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0|602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0>": failed to resolve reference "<http://602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0|602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0>": pulling from host <http://602401143452.dkr.ecr.us-west-2.amazonaws.com|602401143452.dkr.ecr.us-west-2.amazonaws.com> failed with status code [manifests v1.11.0]: 401 UnauthorizedWarningFailed25 minuteskubeletError: ErrImagePullNormalBackOff25 minuteskubeletBack-off pulling image "<http://602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0|602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.11.0>"WarningFailed25 minuteskubeletError: ImagePullBackOff
I did not make any change to the template provided by Pulumi. Any leads on this is appreciated.
The EKS is deployed on
us-east-1
and the image that is pulled is on
us-west-2
ECR. Not sure if that is an issue though 🤷‍♂️
For those who are interested I was able to fix this by specifying the image in
us-east-1
region. Not sure why it was not working for the other region though.
vpcCniOptions: {
        image: "<http://602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.12.5|602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.12.5>",
        initImage: "<http://602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni-init:v1.12.5|602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni-init:v1.12.5>",
    }
s

steep-toddler-94095

03/28/2023, 5:01 AM
makes sense since internal ECR is a regional service.