Not able to connect to the ECR hosted in US region from trivy setup in client-server mode from EKS cluster hosted in EU region

[vinayakkorti]

Description

Below are the details and error we are getting when we run the kubectl logs for the trivy-operator (Client-Server mode) running in EU EKS Cluster. We ran this command to know why are not getting the image scan reports (ECR running in US region)
kubectl -n namespace get vulnerabilityreports.aquasecurity.github.io is not giving the scan report of images hosted in US region the trivy is setup in EU EKS cluster

We have tried installing the new version of trivy i,e v0.43.0 and trivy-operator v0.14.1

Please provide the solution for the above issue Log's as below

scan error: scan error: unable to initialize a scanner: unable to initialize a docker scanner: 5 errors occurred:\n\t* unable to inspect the image (ECR URL): Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?\n\t* unable to initialize Podman client: no podman socket found: stat podman/podman.sock: no such file or directory\n\t* containerd socket not found: /run/containerd/containerd.sock\n\t* GET ECR URL: unexpected status code 401 Unauthorized

Desired Behavior

kubectl -n namespace get vulnerabilityreports.aquasecurity.github.io

when we run above command it should get us vulnerabilityreports report for all the new images hosted in ECR which is in US Region and trivy setup is running in EU EKS cluster

Actual Behavior

Above command is not fetching any vulnerabilityreports reports

Reproduction Steps

1.setup Trivy in client-server model in EU EKS cluster 
2.Host the ECR in US Region
3.Then run the command 
kubectl -n namespace get vulnerabilityreports.aquasecurity.github.io

Target

Container Image

Scanner

Vulnerability

Output Format

JSON

Mode

Client/Server

Debug Output

when we run the kubectl logs trivy-operator -n namespace 

Getting below error:

scan error: scan error: unable to initialize a scanner: unable to initialize a docker scanner: 5 errors occurred:\n\t* unable to inspect the image (*ECR URL*): Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?\n\t* unable to initialize Podman client: no podman socket found: stat podman/podman.sock: no such file or directory\n\t* containerd socket not found: /run/containerd/containerd.sock\n\t* GET *ECR URL*: unexpected status code 401 Unauthorized

Operating System

EKS Cluster deploying through helm

Version

V0.43.0

Checklist

• Run trivy image --reset
• Read the troubleshooting