Skip to main content

Use a Private Docker Registry for Kubernetes Installations

To use private images while installing Levo's services in your environment, you need to follow 3 steps:

  1. Copy Levo's public Docker images into your registry.
  2. Create a secret in your Kubernetes cluster with the credentials to access your private registry.
  3. Specify a values file to the Levo Helm chart to use your private registry.

Copy Levo's public Docker images into your registry​

An example bash script to do this for AWS ECR has been provided below. Please modify this script to suit your needs.

#!/usr/bin/env bash

# Dependencies: yq, helm, awscli, docker

set -e
trap "exit" INT

region="us-west-2"
registry="your.registry"
repositoryPrefix="${repositoryPrefix:-}" # Optional, replace with your repository prefix, in case you are using a different repository

helm repo add levoai https://charts.levo.ai || true
helm repo update levoai
images=($(helm template levoai/levoai-satellite | yq -N '..|.image? | select(.)' | sort -u))
images+=($(helm template levoai/levoai-ebpf-sensor | yq -N '..|.image? | select(.)' | sort -u))

for image in "${images[@]}"; do
  src_image=${image#"docker.io/"}
  if [ -n "$repositoryPrefix" ]; then
    repo_name=${src_image#*/}
    dest_image="$registry/$repositoryPrefix/$repo_name"
  else
    repo_name=${src_image%:*}
    dest_image="$registry/$src_image"
  fi
  aws ecr describe-repositories --repository-names $repo_name --region $region || aws ecr create-repository --repository-name $repo_name --region $region
  echo "Copying $src_image to $dest_image"
  docker buildx imagetools create --tag $dest_image $src_image
done

Create a secret in your Kubernetes cluster with the credentials to access your private registry​

Adapt the following command for your private registry:

kubectl create secret docker-registry ecr-auth --docker-server=your.registry --docker-username=AWS --docker-password=$(aws ecr get-login-password --region us-west-2)

Specify a values file to the Levo Helm chart to use your private registry​

eBPF Sensor​

sensor:
  imageRepo: <your.registry>/levoai/ebpf_sensor

Note: In case you are using a different repository, please replace levoai/ebpf_sensor with the correct repository name.

sensor:
  imageRepo: <your.registry>/<your-repository-prefix>/ebpf_sensor

Satellite​

global:
  levoai_config_override:
    onprem-api:
      org-id: <id>
      refresh-token: <token>
  imageRegistry: <your.registry>
  imagePullSecrets:
    - name: ecr-auth

Note: In case you are using a different repository, please add the following lines to the values.yaml.

global:
    busyboxImage: <your.repository-prefix>/busybox

rabbitmq:
  image:
    repository: <your.repository-prefix>/rabbitmq
    tag: <version>
    
satellite:
  image:
    repository: <your.repository-prefix>/satellite
    tag: <version>

tagger:
  image:
    repository: <your.repository-prefix>/satellite
    tag: <version>

levoai-ion:
  image:
    repository: <your.repository-prefix>/satellite
    tag: <version>
    
levoai-collector:
  image:
    repository: <your.repository-prefix>/collector
    tag: <version>

haproxy:
  image:
    repository: <your.repository-prefix>/haproxy
    tag: <version>