Gitpod with AWS

Ever wondered how to integrate AWS Single Sign-On (SSO) and Amazon Elastic Container Registry (ECR) with Gitpod? Here's how...

Secret Management

Secrets Key-Value Map

sso_start_url = ${AWS_SSO_URL}
sso_region = ${AWS_SSO_REGION}
sso_account_id = ${AWS_ACCOUNT_ID}
sso_role_name = ${AWS_ROLE_NAME}
region = ${AWS_REGION}

Configure secrets

• Configure the following secrets here in Gitpod settings:

  • AWS_SSO_URL
  • AWS_SSO_REGION
  • AWS_ACCOUNT_ID
  • AWS_ROLE_NAME
  • AWS_REGION
  
  

  Note: You Can set scope at for all worskapces (⚠️) or at your Org. Level, at your Personal username level, or at Just Repo. Level. Read More: Configure Environment Variables

• Maybe you use vault or some other secret storage, that's okay. the key is to inject them into the config when the workspace starts.

Demo

Recommended Reading

Gitpod

• One workspace per task
• Environment variables
• Custom Docker Image
• Config .gitpod.yml

AWS

• Automatically gets credentials for Amazon ECR on docker push/docker pull
• AWS CLI Command Reference // login
• Using Amazon ECR with the AWS CLI
• AWS Systems Manager Session Manager

Docker

• Docker command line configuration files