Install Pando

Amazon ECR

ecr An ECR repository you created. Every build goes into it, tagged by app and deployment, and Pando gets a registry password from the access key before each push and pull.

Setup

  1. Create a repository

    1. In the Amazon ECR console, choose the Region from the navigation bar.
    2. Choose Private repositories, then Create repository.
    3. Enter a Repository name, such as pando, and choose Create.
    4. Copy the repository's URI.

    Open Amazon ECR

    Settings url

  2. Create an access key

    1. In IAM, choose Users, then Create user.
    2. Enter a User name, then choose Next and Create user.
    3. On the user's Permissions tab, choose Add permissions, then Create inline policy.
    4. Allow these actions:
      ActionResource
      ecr:GetAuthorizationTokenAll resources
      ecr:BatchCheckLayerAvailabilityThe repository
      ecr:InitiateLayerUploadThe repository
      ecr:UploadLayerPartThe repository
      ecr:CompleteLayerUploadThe repository
      ecr:PutImageThe repository
      ecr:BatchGetImageThe repository
      ecr:GetDownloadUrlForLayerThe repository
      ecr:ListImagesThe repository
      ecr:BatchDeleteImageThe repository
    5. On the Security credentials tab, choose Create access key, then Other and Next.
    6. Choose Create access key, then Show.

    Open IAM users

    Settings access_key_id, secret_access_key

Settings (4)
urlRegistry addressRequired

The repository's URI. It has to exist already.

string · For example 123456789012.dkr.ecr.us-east-1.amazonaws.com/pando

access_key_idAccess key IDRequired

An IAM user's access key that can push to, pull from and delete in the repository.

string · For example AKIA…

secret_access_keySecret access keyRequiredCredential

Stored encrypted, and never shown again.

string

alwaysSend every build through the registryAdvanced

Even on a runtime that can take a built image directly, such as Docker on one host.

bool · Default false