<p>I have k8s clusters on AWS working with ECR and pulling images from all regions. This works fine.</p>

<p>But when I try to <strong>pull images from a different account they get "no such host"</strong>. I followed these instructions to <a href="https://stackoverflow.com/questions/48265269/kubernetes-pull-private-external-amazon-ecr-images">set iam permissions</a> (and the docs). I'm not getting permission denied - I'm getting this:</p>

<pre><code>Failed to pull image "&lt;acc id&gt;.dkr.ecr.ap-outheast-2.amazonaws.com/image:tag": 
rpc error: code = Unknown desc = Error response from daemon: 
Get https://&lt;acc id&gt;.dkr.ecr.ap-outheast-2.amazonaws.com/v1/_ping: 
dial tcp: lookup &lt;acc id&gt;.dkr.ecr.ap-outheast-2.amazonaws.com 
on 10.71.0.2:53: no such host
</code></pre>

<p>My cluster is running in ap-southeast-1 and the IP 10.71.0.2:53 is the default DNS AWS set for the VPC</p>

<p>I'm trying to wok around this by populating this region's ECR as well. But it seems pretty wrong.</p>

<p>Any idea how to allow ECR to pull from another region?</p>

Amir Mehler
<p>I think you made simple typo in .dkr.ecr.<strong>ap-outheast-2</strong>.amazonaws.com/image:tag - that's why you receive no such host from DNS server, just try to replace ap-outheast-2 with ap-<strong>s</strong>outheast-2.</p>

<p>Generally if you set ECR IAM right that should work as ECR is accessible/routable  as public service in Internet with limitations based on IAM.</p>
