Added ECR registry (#35)

* Added ECR registry

* Added ECR registry

* Use ECR

* Use ECR

* Fix README

* Fix README

* Fix README

Author: goruha

.github/workflows/feature-branch.yml

@@ -7,18 +7,19 @@ on:
 permissions:
   pull-requests: write
   deployments: write
+  id-token: write
+  contents: read
 
 jobs:
   perform:
     uses: cloudposse/github-actions-workflows/.github/workflows/dockerized-app-feature-branch.yml@main
     with:
       organization: "${{ github.event.repository.owner.login }}"
       repository: "${{ github.event.repository.name }}"
-      registry: registry.hub.docker.com
       open: ${{ github.event.pull_request.state == 'open' }}
       labels: ${{ toJSON(github.event.pull_request.labels.*.name) }}
       ref: ${{ github.event.pull_request.head.ref  }}
     secrets:
-      docker-login: "${{ secrets.DOCKERHUB_USERNAME }}"
-      docker-password: "${{ secrets.DOCKERHUB_PASSWORD }}"
       github-private-actions-pat: "${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}"
+      registry: "${{ secrets.ECR_REGISTRY }}"
+      secret-outputs-passphrase: "${{ secrets.GHA_SECRET_OUTPUT_PASSPHRASE }}"

.github/workflows/main-branch.yaml

@@ -13,8 +13,7 @@ jobs:
     with:
       organization: "${{ github.event.repository.owner.login }}"
       repository: "${{ github.event.repository.name }}"
-      registry: registry.hub.docker.com
     secrets:
-      docker-login: "${{ secrets.DOCKERHUB_USERNAME }}"
-      docker-password: "${{ secrets.DOCKERHUB_PASSWORD }}"
       github-private-actions-pat: "${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}"
+      registry: "${{ secrets.ECR_REGISTRY }}"
+      secret-outputs-passphrase: "${{ secrets.GHA_SECRET_OUTPUT_PASSPHRASE }}"

.github/workflows/release.yaml

@@ -12,9 +12,8 @@ jobs:
     with:
       organization: "${{ github.event.repository.owner.login }}"
       repository: "${{ github.event.repository.name }}"
-      registry: registry.hub.docker.com
       version: ${{ github.event.release.tag_name }}
     secrets:
-      docker-login: "${{ secrets.DOCKERHUB_USERNAME }}"
-      docker-password: "${{ secrets.DOCKERHUB_PASSWORD }}"
       github-private-actions-pat: "${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}"
+      registry: "${{ secrets.ECR_REGISTRY }}"
+      secret-outputs-passphrase: "${{ secrets.GHA_SECRET_OUTPUT_PASSPHRASE }}"

deploy/helmfile.yaml

@@ -6,8 +6,7 @@ environments:
   production:
 
 helmfiles:
-#  - "releases/pull-secret.yaml"
-  - path: "./releases/app.yaml"
+  - path: "releases/app.yaml"
     values:
       -
 {{ .Values | toYaml | indent 8 }}

deploy/releases/app.yaml

@@ -20,23 +20,19 @@ releases:
 # References:
 #   - https://github.com/cloudposse/charts/blob/master/incubator/monochart
 #
-- name: '{{ requiredEnv "RELEASE_NAME" }}'
+- name: 'example-app'
   labels:
-    color: "{{ requiredEnv "COLOR" }}"
     preview: "true"
   chart: "cloudposse-incubator/monochart"
   version: "0.22.0"
   wait: true
   force: true
   recreatePods: false
   values:
-    - fullnameOverride: "example-{{ requiredEnv "COLOR" }}"
-      image:
+    - image:
         repository: '{{ env "IMAGE_NAME" | default "cloudposse/example-app" }}'
         tag: '{{ env "IMAGE_TAG" | default "0.1.0" }}'
         pullPolicy: Always
-        #pullSecrets:
-        #  - "{{ requiredEnv "RELEASE_NAME" }}-pull-secret-dockercfg "
       replicaCount: 2
       # Deployment configuration
       deployment:
@@ -51,11 +47,6 @@ releases:
       configMaps:
         default:
           enabled: true
-          env:
-            # Color to deploy
-            #COLOR: "#0099ff" # Blue
-            #COLOR: "#009900"  # Green
-            COLOR: "{{ env "COLOR" }}"
 
       # Service endpoint 
       service: