Docker Engine daemon.json: ukweqa i-proxy ye-ECR ne-S3 eziyimfihlo

Cabangela ukulandwa kwamazinga e-S3 lapho weqa i-proxy ye-HTTP ukuze udonse izithombe ze-ECR eziyimfihlo ngamaphoyinti okugcina e-VPC.

Ukuxhumana okuphumelelayo nesibhalisi se-ECR esiyimfihlo akukuqedi ukudonsa kwesithombe. I-ECR inikeza i-manifest, kuyilapho i-Amazon S3 igcina amazinga esithombe. Ngakho-ke ukweqa okuhlanganisa isibhalisi kuphela kungase kushiye ukulandwa kwamazinga kwenye indlela.

Ukuze uthole ukufinyelela okuyimfihlo ngamaphoyinti okugcina e-VPC, hlola zombili izindlela:

  • Iphoyinti lokugcina lesixhumanisi se-ECR kanye nokuhlelwa kwe-DNS yalo eyimfihlo.
  • Iphoyinti lokugcina le-S3, amathebula emizila ahlobene nalo, kanye nenqubomgomo evumela ukufinyelela kubhakethi yamazinga ye-ECR.

Bese ubeka amagama okweqa afanele kwinqubo eyenza ukudonsa. Ku-Docker Engine yemvelo enokuhlelwa kwe-proxy kwe-daemon.json okukhona, ukuhlelwa okuyisibonelo kwe-us-east-2 kungu:

{
  "proxies": {
    "http-proxy": "http://proxy.example:8080",
    "https-proxy": "http://proxy.example:8080",
    "no-proxy": "123456789012.dkr.ecr.us-east-2.amazonaws.com,prod-us-east-2-starport-layer-bucket.s3.us-east-2.amazonaws.com"
  }
}

Hlanganisa amanqenja ahlosiwe nezinye izilungiselelo ze-daemon kanye nohlu lokweqa olukhona. Uma okunye ukulandwa kwezibhalisi zomphakathi kungase kusebenzise umxhumanisi womphakathi, uhlu lwe-proxy ye-HTTP lunikeza abantu abangaba ngamakhandidethi bama-URL e-proxy angenayo i-akhawunti; gcina ukweqa kwe-ECR ne-S3 eziyimfihlo. Shintsha i-akhawunti, isifunda kanye ne-hostname yokulandwa kwamazinga ngamagama okudonsa ewasebenzisa ngempela. Izimo zamagama e-S3 nokuhlelwa kwamaphoyinti okugcina kungase kwehluke; lesi sibonelo akulona uhlu oluphelele lwamaphoyinti okugcina e-AWS. Ukusebenzisa ukuhlelwa kwe-daemon kudinga ukuqalisa kabusha i-daemon okuhlosiwe. I-Docker Desktop isebenzisa izilungiselelo zayo ze-proxy.

Ukweqa kukhetha umzila oqondile. Akukwazi ukudala iphoyinti lokugcina le-S3 elingekho, ukunamathisela ithebula lemizila, ukunikeza ukufinyelela kubhakethi noma ukulungisa i-DNS eyimfihlo. Qinisekisa lokho kuncika ngaphambi kokunweba ukweqa emikhandlwini ebanzi ye-AWS.

Izilungiselelo ze-proxy zesiqukathi kuklayenti le-Docker azikuhleli ukulandwa kwezithombe kwe-daemon. Ngokufanayo, umyalo we-AWS CLI othola ubufakazi bokungena kwe-ECR unokuhlelwa kwayo kwe-proxy; faka indawo yayo yokufika ye-API uma leso sicelo esihlukile naso sidinga ukufinyelela okuyimfihlo.

Izihloko ezihlobene