Bayram Ozinal ozinal

AWS Service annotations

service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval (in minutes)
service.beta.kubernetes.io/aws-load-balancer-access-log-enabled (true|false)
service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name
service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags (comma-separated list of key=value)
service.beta.kubernetes.io/aws-load-balancer-backend-protocol (http|https|ssl|tcp)
service.beta.kubernetes.io/aws-load-balancer-connection-draining-enabled (true|false)

The easiest way to create and update a docker-registry secret in Rancher 2.x for an AWS ECR repo is to set up a CRON job that uses the AWS CLI and Kubectl.

Log into the host machine where the cluster is running
Install AWS CLI and configure it to use an IAM role that can read the ECR credentials.
Test the CLI config using this command: aws ecr --region <your_ecr's_region> get-login-password
Install kubectl and configure it with the yaml for the cluster in which you want to define the secret
Create a shell script like this:

# Delete the secret if it already exists (there is no way to update it)

	#! /bin/bash


	# Sass: http://sass-lang.com/
	# Sass is a "smart" form of css, supporting nested targeting of html, variables and logic
	# scss is a variant of sass using a syntax much closer to css

	# Compass: http://compass-style.org/
	# Compass is a sass framework containing a range of shortcuts for cross-browser css effects.
	# rounded corners, transparency...