Could not login to OCI registry "public.ecr.aws": login attempt to https://public.ecr.aws/v2/ failed with status: 403 Forbidden about karpenter-provider-aws HOT 5 CLOSED

Remove repository_username and repository_password for public repositories.

from karpenter-provider-aws.

I'm going to guess you can't provide an authorization token to ECR public, could you try removing these lines?

data "aws_ecrpublic_authorization_token" "token" {
    # https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ecrpublic_authorization_token
    provider = aws.use1
}

The public ECR is currently the only official release source for the helm chart.

from karpenter-provider-aws.

Thanks for your answer, took it from the official examples, seems there's an issue there then ! https://github.com/terraform-aws-modules/terraform-aws-eks/blob/323fb759d718ed1f295c7278ef89a2e2f060d4a1/examples/karpenter/main.tf#L147

Thanks again !

from karpenter-provider-aws.

Why is this closed? I am hitting the same issue. What is the solution?

from karpenter-provider-aws.

Just tested today by installing Karpenter. As mentioned by @RobinFrcd, it works fine after removing repository_username and repository_password for public repositories.

Additionally, we can safely remove data "aws_ecrpublic_authorization_token" if we don't use private ECR repositories.

from karpenter-provider-aws.