Skip to content

ci: push python-processor images to public ECR - #360

Merged
mheffner merged 1 commit into
mainfrom
ci/python-processors-public-ecr
Aug 3, 2026
Merged

ci: push python-processor images to public ECR#360
mheffner merged 1 commit into
mainfrom
ci/python-processors-public-ecr

Conversation

@mheffner

@mheffner mheffner commented Aug 3, 2026

Copy link
Copy Markdown
Member

Adds a docker-push-ecr job to processor-release.yml, mirroring the existing docker-push-clickhouse-ddl-ecr job in release.yml.

  • Authenticates to AWS via OIDC (permissions: id-token: write)
  • Uses a new named secret: AWS_ECR_PUBLIC_PYTHON_PROCESSORS_ROLE_ARN
  • Pushes multi-arch (amd64/arm64) images to public.ecr.aws/rotel-dev/python-processors
  • Same Dockerfile.python-processor and tag strategy as the DockerHub job

Before merging: the AWS_ECR_PUBLIC_PYTHON_PROCESSORS_ROLE_ARN repo secret needs to be created, and the python-processors repo created under the rotel-dev public ECR alias.

Mirrors the clickhouse-ddl public ECR job: assumes an OIDC role from the
AWS_ECR_PUBLIC_PYTHON_PROCESSORS_ROLE_ARN secret and pushes multi-arch
images to public.ecr.aws/rotel-dev/python-processors.
@mheffner
mheffner merged commit 4feeb1a into main Aug 3, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant