gitpod-samples / demo-aws-with-gitpod

Learn how to integrate AWS Single Sign-On (SSO) and Amazon Elastic Container Registry (ECR) with Gitpod.

Gitpod with AWS

This repository contains an example of how to integrate AWS Single Sign-On (SSO) and Amazon Elastic Container Registry (ECR) with Gitpod.

Demo

Configure Secrets & Hit Below button:

Secret Management

Secrets Key-Value Map

sso_start_url = ${AWS_SSO_URL}
sso_region = ${AWS_SSO_REGION}
sso_account_id = ${AWS_ACCOUNT_ID}
sso_role_name = ${AWS_ROLE_NAME}
region = ${AWS_REGION}

Configure secrets

• Configure the following secrets here in Gitpod settings:

  • AWS_SSO_URL
  • AWS_SSO_REGION
  • AWS_ACCOUNT_ID
  • AWS_ROLE_NAME
  • AWS_REGION
  
  

  Note: You Can set scope at for all worskapces (⚠️) or at your Org. Level, at your Personal username level, or at Just Repo. Level. Read More: Configure Environment Variables

• Maybe you use vault or some other secret storage, that's okay. The key is to inject them into the config when the workspace starts.

🚀 Now, You are ready to use AWS CLI, & With that, you can log in to your SSO or Use AWS ECR to use Private Registries/ Images.

Recommended Reading

Gitpod

• One workspace per task
• Environment variables
• Custom Docker Image
• Config .gitpod.yml

AWS

• Automatically gets credentials for Amazon ECR on docker push/docker pull
• AWS CLI Command Reference // login
• Using Amazon ECR with the AWS CLI
• AWS Systems Manager Session Manager

Docker

• Docker command line configuration files