Merge pull request #39 from MITLibraries/dev

Dev-to-Stage: Add ECR Repositories for browsertrix-harvester

Author: cabutlermit

README.md

@@ -88,6 +88,7 @@ then replace all the ssm parameter references for `oidc_arn` with `aws_iam_openi
 | ecr\_ppod | ./modules/ecr | n/a |
 | ecr\_sapinvoices | ./modules/ecr | n/a |
 | ecr\_slingshot | ./modules/ecr | n/a |
+| ecr\_timdex\_broswertrix | ./modules/ecr | n/a |
 | ecr\_timdex\_lambdas | ./modules/ecr | n/a |
 | ecr\_timdex\_tim | ./modules/ecr | n/a |
 | ecr\_timdex\_transmogrifier | ./modules/ecr | n/a |
@@ -123,6 +124,10 @@ then replace all the ssm parameter references for `oidc_arn` with `aws_iam_openi
 | alma\_webhook\_lambdas\_makefile | Full contents of the Makefile for the alma-webhook-lambdas repo (allows devs to push to Dev account only) |
 | alma\_webhook\_lambdas\_prod\_promote\_workflow | Full contents of the prod-promote.yml for the alma-webhook-lambdas repo |
 | alma\_webhook\_lambdas\_stage\_build\_workflow | Full contents of the stage-build.yml for the alma-webhook-lambdas repo |
+| broswertrix\_dev\_build\_workflow | Full contents of the dev-build.yml for the browsertrix-harvester repo |
+| broswertrix\_makefile | Full contents of the Makefile for the browsertrix-harvester repo (allows devs to push to Dev account only) |
+| broswertrix\_prod\_promote\_workflow | Full contents of the prod-promote.yml for the browsertrix-harvester repo |
+| broswertrix\_stage\_build\_workflow | Full contents of the stage-build.yml for the browsertrix-harvester repo |
 | bursar\_dev\_build\_workflow | Full contents of the dev-build.yml for the alma-bursartransfer repo |
 | bursar\_makefile | Full contents of the Makefile for the alma-bursartransfer repo (allows devs to push to Dev account only) |
 | bursar\_prod\_promote\_workflow | Full contents of the prod-promote.yml for the alma-bursartransfer repo |

timdex_ecrs.tf

@@ -185,6 +185,7 @@ output "timdex_lambdas_prod_promote_workflow" {
   description = "Full contents of the prod-promote.yml for the timdex-pipeline-lambdas repo"
 }
 
+
 ## timdex-index-manager 
 # timdex-index-manager ECR repository
 module "ecr_timdex_tim" {
@@ -242,3 +243,62 @@ output "tim_prod_promote_workflow" {
   )
   description = "Full contents of the prod-promote.yml for the timdex-index-manager repo"
 }
+
+
+## browsertrix-harvester
+# browsertrix-harvester ECR repository
+module "ecr_timdex_broswertrix" {
+  source            = "./modules/ecr"
+  repo_name         = "browsertrix-harvester"
+  login_policy_arn  = aws_iam_policy.login.arn
+  oidc_arn          = data.aws_ssm_parameter.oidc_arn.value
+  environment       = var.environment
+  tfoutput_ssm_path = var.tfoutput_ssm_path
+  tags = {
+    app-repo = "timdex-infrastructure-browsertrix"
+  }
+}
+# Outputs in dev
+output "broswertrix_dev_build_workflow" {
+  value = var.environment == "prod" || var.environment == "stage" ? null : templatefile("${path.module}/files/dev-build.tpl", {
+    region   = var.aws_region
+    role     = module.ecr_timdex_broswertrix.gha_role
+    ecr      = module.ecr_timdex_broswertrix.repository_name
+    function = ""
+    }
+  )
+  description = "Full contents of the dev-build.yml for the browsertrix-harvester repo"
+}
+output "broswertrix_makefile" {
+  value = var.environment == "prod" || var.environment == "stage" ? null : templatefile("${path.module}/files/makefile.tpl", {
+    ecr_name = module.ecr_timdex_broswertrix.repository_name
+    ecr_url  = module.ecr_timdex_broswertrix.repository_url
+    function = ""
+    }
+  )
+  description = "Full contents of the Makefile for the browsertrix-harvester repo (allows devs to push to Dev account only)"
+}
+# Outputs in stage
+output "broswertrix_stage_build_workflow" {
+  value = var.environment == "prod" || var.environment == "dev" ? null : templatefile("${path.module}/files/stage-build.tpl", {
+    region   = var.aws_region
+    role     = module.ecr_timdex_broswertrix.gha_role
+    ecr      = module.ecr_timdex_broswertrix.repository_name
+    function = ""
+    }
+  )
+  description = "Full contents of the stage-build.yml for the browsertrix-harvester repo"
+}
+# Outputs after promotion to prod
+output "broswertrix_prod_promote_workflow" {
+  value = var.environment == "stage" || var.environment == "dev" ? null : templatefile("${path.module}/files/prod-promote.tpl", {
+    region     = var.aws_region
+    role_stage = "${module.ecr_timdex_broswertrix.repo_name}-gha-stage"
+    role_prod  = "${module.ecr_timdex_broswertrix.repo_name}-gha-prod"
+    ecr_stage  = "${module.ecr_timdex_broswertrix.repo_name}-stage"
+    ecr_prod   = "${module.ecr_timdex_broswertrix.repo_name}-prod"
+    function   = ""
+    }
+  )
+  description = "Full contents of the prod-promote.yml for the browsertrix-harvester repo"
+}