ministryofjustice/staff-device-docker-base-images

Docker base images published to ECR for various services

Repository is now archived ⚠️ Images are now pulled from DockerHub as per this github issue

Staff Device Docker Base Image

Repo for base images used across multiple services. Created as the solution to dockerhub rate limts as suggested by AWS.

To run this repo you will need:

• aws-vault
• access to shared-services

Adding Repositories

1. Update the shared services infrastruture to create your ECR repository. This can be done here by adding the repository name to main.tf in the ecr_images module scope. Make a note of the name chosen.

2. Create a folder under images with the same name as the repository in step one.

3. Add a Dockerfile to this folder and populate it with the correct base image value.

4. Run: make build-and-publish

Updating Existing Container Images

1. Create a branch on this repository.
2. Open the image Dockerfile within the images folder that you would like to update e.g. images\grafana\Dockerfile.
3. Change image version to desired e.g. FROM grafana/grafana:8.3.3 to FROM grafana/grafana:8.3.4
4. Create a Pull Request wait for review, merge and then switch back to main.
5. Run: make build-and-publish this pulls down all images and then pushes them into ECR.
6. To publish a single image to ECR you can run make publish-specific IMAGE="<<image-name>>" NOTE : <<image-name>> must match the folder name where the Dockerfile is stored.
7. The running container will not update until container services are redeployed. For Elastic Container Service, go to the service, select the Update button and leave all defaults except tick the box by Force New Deployment this will recreate all the running containers with the new image.

staff-device-docker-base-images's Issues

Upgrade docker images

Upgrade docker images in shared services base images repository

Review after date expiry is upcoming for user: richrace

Hi there

The user @richrace has its access for this repository maintained in code here:
https://github.com/ministryofjustice/github-collaborators/blob/main/README.md#github-external-collaborators

The review_after date is due to expire within one month, please update this via a PR if they still require access.

If you have any questions, please post in #ask-operations-engineering on Slack.

👁‍🗨 Issue to add labels

A branch protection setting is not enabled: administrators require review

Hi there
The default branch protection setting called administrators require review is not enabled for this repository
See repository settings/Branches/Branch protection rules
Either add a new Branch protection rule or edit the existing branch protection rule and select the Require a pull request before merging option
See the repository standards: https://github.com/ministryofjustice/github-repository-standards
See the report: https://operations-engineering-reports.cloud-platform.service.justice.gov.uk/github_repositories
Please contact Operations Engineering on Slack #ask-operations-engineering, if you need any assistance

🐳 Github action to automatically push updated image to ECR

As a Cloud Ops team member .
I want the pushing of updated docker images to ECR to be automated.
So that the process takes less time and doesn't require manual intervention from me.