Skip to content

DEVOPS-5942: publish Nuclio processor base image to ECR

Glaydston de Oliveira Veloso requested to merge feature/DEVOPS-5942-publish-nuclio-image-to-ecr into develop

Replaces the retired DigitalOcean registry build with a tag-triggered pipeline that publishes the Nuclio processor base image to the per-region PRO ECR repos (irlanda-pro / london-pro / harvard-pro / virginia-pro, repo <prefix>/nuclio-processor).

Auth: GitLab OIDC → arn:aws:iam::014155356343:role/gitlab-ci-role (eks-pro). The role's trust (this project, tag-only) and 3-region ECR push scope were added in devops.terraform.aws (_envcommon/iam-gitlab-ci-role.hcl + live/pro/eks-pro/account.hcl) and are already applied.

Trigger: git tag only. The pyXX tag is derived from the ref's own Dockerfile base image — tag master ships py37, tag python-3_11 ships py311.

Tags pushed: the moving :pyXX tag the Nuclio functions resolve (base_image: labdrive:pyXX), plus :pyXX-<gittag> for release traceability.

Unblocks the stale py37 base image (last pushed 2025-12) so the export-to-datacite fix on master reaches production Nuclio.

Merge request reports