You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Mao Geng (JIRA)" <ji...@apache.org> on 2017/05/18 16:41:04 UTC

[jira] [Updated] (MESOS-7522) Mesos containerizer to support docker credential helpers for private docker registries

     [ https://issues.apache.org/jira/browse/MESOS-7522?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mao Geng updated MESOS-7522:
----------------------------
    Description: 
In Pinterest, we use Amazon ECR as our docker registry and use https://github.com/awslabs/amazon-ecr-credential-helper to let docker engine to get auth token automatically. 

It works well with docker containerizer, as long as I have the .docker/config.json configured "credStores" and --docker_config configured for mesos-agent. 

However, this doesn't work for mesos containerizer. Meanwhile we want to use mesos containerizer's GPU support, so we have to run a separate docker registry on http and without auth, purely for mesos containerizer. 

I think it will be good if mesos containerizer can support https://github.com/docker/docker-credential-helpers by default, so that it will address a pain point for the users who are using crendential helpers with private registries on ECR, GCR, quay, dockerhub etc. 

This might be related to MESOS-7088

CC [~jieyu] [~gilbert]

  was:
In Pinterest, we use Amazon ECR as our docker registry and use https://github.com/awslabs/amazon-ecr-credential-helper to let docker engine to get auth token automatically. 

It works well with docker containerizer, as long as I have the .docker/config.json configured "credStores" and --docker_config configured for mesos-agent. 

However, this doesn't work for mesos containerizer. Meanwhile we want to use mesos containerizer's GPU support, so we have to run a separate docker registry on http and without auth, purely for mesos containerizer. 

I think it will be good if mesos containerizer can support https://github.com/docker/docker-credential-helpers by default, so that it will address a pain point for the users who are using crendential helpers with private registries on ECR, GCR, quay, dockerhub etc. 

This might be related to MESOS-7088


> Mesos containerizer to support docker credential helpers for private docker registries
> --------------------------------------------------------------------------------------
>
>                 Key: MESOS-7522
>                 URL: https://issues.apache.org/jira/browse/MESOS-7522
>             Project: Mesos
>          Issue Type: Wish
>          Components: containerization
>            Reporter: Mao Geng
>              Labels: mesos-containerizer
>
> In Pinterest, we use Amazon ECR as our docker registry and use https://github.com/awslabs/amazon-ecr-credential-helper to let docker engine to get auth token automatically. 
> It works well with docker containerizer, as long as I have the .docker/config.json configured "credStores" and --docker_config configured for mesos-agent. 
> However, this doesn't work for mesos containerizer. Meanwhile we want to use mesos containerizer's GPU support, so we have to run a separate docker registry on http and without auth, purely for mesos containerizer. 
> I think it will be good if mesos containerizer can support https://github.com/docker/docker-credential-helpers by default, so that it will address a pain point for the users who are using crendential helpers with private registries on ECR, GCR, quay, dockerhub etc. 
> This might be related to MESOS-7088
> CC [~jieyu] [~gilbert]



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)