Add ECR for Geo-Harvester

Why these changes are being introduced:
A new geo-harvester function is being written for the GDT project to
add geographic and geospatial data to TIMDEX. This creates the ECR repo
in AWS to hold the built containers.

How this addresses that need:
* Add a new ECR to the set of TIMDEX ECRs called geo-harvester
* Update README

Side effects of this change:
None.

Relevant ticket(s):
* https://mitlibraries.atlassian.net/browse/GDT-38

Author: cabutlermit

README.md

@@ -89,6 +89,7 @@ then replace all the ssm parameter references for `oidc_arn` with `aws_iam_openi
 | ecr\_sapinvoices | ./modules/ecr | n/a |
 | ecr\_slingshot | ./modules/ecr | n/a |
 | ecr\_timdex\_broswertrix | ./modules/ecr | n/a |
+| ecr\_timdex\_geo | ./modules/ecr | n/a |
 | ecr\_timdex\_lambdas | ./modules/ecr | n/a |
 | ecr\_timdex\_tim | ./modules/ecr | n/a |
 | ecr\_timdex\_transmogrifier | ./modules/ecr | n/a |
@@ -144,6 +145,10 @@ then replace all the ssm parameter references for `oidc_arn` with `aws_iam_openi
 | dss\_fargate\_makefile | Full contents of the Makefile for the dss repo (allows devs to push to Dev account only) |
 | dss\_fargate\_prod\_promote\_workflow | Full contents of the prod-promote.yml for the dss repo |
 | dss\_fargate\_stage\_build\_workflow | Full contents of the stage-build.yml for the dss repo |
+| geo\_dev\_build\_workflow | Full contents of the dev-build.yml for the geo-harvester repo |
+| geo\_makefile | Full contents of the Makefile for the geo-harvester repo (allows devs to push to Dev account only) |
+| geo\_prod\_promote\_workflow | Full contents of the prod-promote.yml for the geo-harvester repo |
+| geo\_stage\_build\_workflow | Full contents of the stage-build.yml for the geo-harvester repo |
 | geoserver\_fargate\_dev\_build\_workflow | Full contents of the dev-build.yml for the geoserver-deposits repo |
 | geoserver\_fargate\_makefile | Full contents of the Makefile for the geoserver-deposits repo (allows devs to push to Dev account only) |
 | geoserver\_fargate\_prod\_promote\_workflow | Full contents of the prod-promote.yml for the geoserver-deposits repo |

timdex_ecrs.tf

@@ -302,3 +302,62 @@ output "broswertrix_prod_promote_workflow" {
   )
   description = "Full contents of the prod-promote.yml for the browsertrix-harvester repo"
 }
+
+
+## geo-harvester
+# geo-harvester ECR repository
+module "ecr_timdex_geo" {
+  source            = "./modules/ecr"
+  repo_name         = "geo-harvester"
+  login_policy_arn  = aws_iam_policy.login.arn
+  oidc_arn          = data.aws_ssm_parameter.oidc_arn.value
+  environment       = var.environment
+  tfoutput_ssm_path = var.tfoutput_ssm_path
+  tags = {
+    app-repo = "timdex-infrastructure-geo"
+  }
+}
+# Outputs in dev
+output "geo_dev_build_workflow" {
+  value = var.environment == "prod" || var.environment == "stage" ? null : templatefile("${path.module}/files/dev-build.tpl", {
+    region   = var.aws_region
+    role     = module.ecr_timdex_geo.gha_role
+    ecr      = module.ecr_timdex_geo.repository_name
+    function = ""
+    }
+  )
+  description = "Full contents of the dev-build.yml for the geo-harvester repo"
+}
+output "geo_makefile" {
+  value = var.environment == "prod" || var.environment == "stage" ? null : templatefile("${path.module}/files/makefile.tpl", {
+    ecr_name = module.ecr_timdex_geo.repository_name
+    ecr_url  = module.ecr_timdex_geo.repository_url
+    function = ""
+    }
+  )
+  description = "Full contents of the Makefile for the geo-harvester repo (allows devs to push to Dev account only)"
+}
+# Outputs in stage
+output "geo_stage_build_workflow" {
+  value = var.environment == "prod" || var.environment == "dev" ? null : templatefile("${path.module}/files/stage-build.tpl", {
+    region   = var.aws_region
+    role     = module.ecr_timdex_geo.gha_role
+    ecr      = module.ecr_timdex_geo.repository_name
+    function = ""
+    }
+  )
+  description = "Full contents of the stage-build.yml for the geo-harvester repo"
+}
+# Outputs after promotion to prod
+output "geo_prod_promote_workflow" {
+  value = var.environment == "stage" || var.environment == "dev" ? null : templatefile("${path.module}/files/prod-promote.tpl", {
+    region     = var.aws_region
+    role_stage = "${module.ecr_timdex_geo.repo_name}-gha-stage"
+    role_prod  = "${module.ecr_timdex_geo.repo_name}-gha-prod"
+    ecr_stage  = "${module.ecr_timdex_geo.repo_name}-stage"
+    ecr_prod   = "${module.ecr_timdex_geo.repo_name}-prod"
+    function   = ""
+    }
+  )
+  description = "Full contents of the prod-promote.yml for the geo-harvester repo"
+}