Uploading the Image to AWS Container Registry (ECR)

Use the information in this section to upload the Protegrity Anonymization API image to the AWS container registry (ECR) for running the Protegrity Anonymization API in EKS.

Ensure that you have set up your Container Registry.

Note: The steps listed in this section for uploading the container images to the Amazon Elastic Container Repository (ECR) are for reference use. You can choose to use a different Container Registry for uploading the container images.

For more information about setting up Amazon ECR, refer to Moving an image through its lifecycle in Amazon ECR.

To install the Protegrity Anonymization API:

1. Log in to the machine as an administrator to install the Protegrity Anonymization API.

2. Install Docker using the steps provided at https://docs.docker.com/engine/install/.

3. Configure Docker to push the Protegrity Anonymization API images to the AWS Container Registry (ECR) by running following command:

   aws ecr get-login-password --region <Region> | docker login --username AWS --password-stdin <AWS_account_ID>.dkr.ecr.<Region>.amazonaws.com
   

4. Obtain and extract the Protegrity Anonymization files to a directory on your system.

   a. Download and extract the ANON-API_RHUBI-ALL-64_x86-64_Generic.K8S_1.4.1.14.tgz files from the .tgz archive.

   • anonrestapi_1.4.1.14.tgz
   • cluster-autoscaler-autodiscover.yaml
   • cluster-aws.yaml
   • dependent_images.tgz

   b. Extract the anonrestapi_1.4.1.14.tgz files from the .tgz archive.

   • Anon_logs.sh
   • README.md
   • anonapi_1.4.1.14.tgz
   • anonapi_helm_1.4.1.14.tgz
   • contractual.csv

   Note: Do not extract the anonapi_1.4.1.14.tgz package. This file must be loaded directly into Docker using the docker load command.

5. Navigate to the directory where the following image packages are located.

   • dependent_images.tgz
   • anonapi_1.4.1.14.tgz

6. Load the Docker image into Docker by using the following command:

   a. Load the dependent images.

   docker load < dependent_images.tgz
   

   b. Load the Protegrity Anonymization API image.

   docker load < anonapi_1.4.1.14.tgz
   

7. List the images that are loaded by using the following command:

   docker images
   

8. Tag the image to the ECR repository by using the following command:

   docker tag <Container image>:<Tag> <Container registry path>/<Container image>:<Tag>
   

   For example:

   docker tag ANON-API_1.4.1.14:anon_EKS <account_name>.dkr.ecr.region.amazonaws.com/anon:anon_EKS
   

9. Push the tagged image to the ECR by using the following command:

   docker push <Container_regitry_path>/<Container_image>:<Tag>
   

   For example:

   docker push <account_name>.dkr.ecr.region.amazonaws.com/anon:anon_EKS
   

The images are loaded to the ECR and are ready for deployment.

For more information about pushing container images to the ECR, refer to Moving an image through its lifecycle in Amazon ECR.