How To Get image from Gitlab

[powerserg19]

I want to pull in a docker image that resides Gitlab container registry. This is what i call
ContainerImage ci = ContainerImage.fromRegistry("[pathtorepository]");
When my stack deploys I get and access forbidden error
How do I provide the ECS the deploy tokens/creds it needs to pull from that registry when my stack deploys? Or is the access entirely on the gitlab side? In other words in the CDK code I dont have to pass in anything nor do i need to set anything up in AWS
Thanks

[skinny85]

Hey @powerserg19 ,

the ContainerImage.fromRegistry() method takes a second optional argument of type RepositoryImageProps that allows you to specify the credentials (from SecretsManager) to use to authenticate with the registry.

Thanks,
Adam

[skinny85]

Pretty sure the format of the Secret needs to be { username: "you-username-here", password: "your-password-here" }. Using a random key like forawsdeply will not work.

[powerserg19]

First off.... thank you for taking the time to help me!
I have another question- Do I need to add an executionRole to the task definition? If I understand the docs correctly, I do. So I did this in the code

  // creat a task defintion for a container to run
        IPrincipal compositePrincipal =  ServicePrincipal.Builder.create("ecs.amazonaws.com").build();

        IPrincipal compositePrincipal2 =  ServicePrincipal.Builder.create("ecs-tasks.amazonaws.com").build();

        IRole taskrole = Role.Builder.create(this, "taskRole").assumedBy(compositePrincipal).assumedBy(compositePrincipal2).build();
        TaskDefinition taskDefinition = TaskDefinition.Builder.create(this, "TaskDef").executionRole( taskrole)
            .compatibility(Compatibility.EC2).build();`

[skinny85]

That shouldn't be required - the construct should handle that for you (here).

[powerserg19]

I created a deploy token in Gitlab instead of and access token and that worked
Thank you very much.

[vinayakkulkarni]

For folks looking for v2 docs –

1. https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ecs.ContainerImage.html#static-fromwbrregistryname-props
2. https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ecs.RepositoryImageProps.html

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.