A while back I wrote a blog post about using Credential Providers to automate getting secrets for pulling images for Kubernetes.
Today I had cause to go back to look at that when my cluster was failing to pull images (because they didn't exist, foolishly)
and I decided I needed a way to automatically check whether I could actually pull the images. Unlike with the docker credential
helpers, you can't just "pull" an image, you need to tell crictl what credentials to use (as this is usually handled by
kubelet), so I wrote the first script - ecr_pullImage.function.sh. After a short while I realised it would be more useful
to be able to pull from several image sources, and asked Claude to enhance the script to figure out what