在EKS中使用来自其他帐户的ECR镜像

aws sts assume-role --role-arn arn:aws:iam::ACCOUNT-A-ID:role/EKS-ECR-Access --role-session-name "EKS-Session"

kubectl create secret docker-registry ecr-secret \
  --docker-server=https://ACCOUNT-A-ID.dkr.ecr.region.amazonaws.com \
  --docker-username=AWS \
  --docker-password=<AccessKeyId>:<SecretAccessKey> \
  --docker-email=unused \
  --dry-run=client -o yaml | kubectl apply -f -

apiVersion: apps/v1
kind: Deployment
metadata:
  name: my-deployment
spec:
  replicas: 1
  selector:
    matchLabels:
      app: my-app
  template:
    metadata:
      labels:
        app: my-app
    spec:
      containers:
      - name: my-container
        image: ACCOUNT-A-ID.dkr.ecr.region.amazonaws.com/my-repo/my-image:latest
      imagePullSecrets:
      - name: ecr-secret