opentofu-ecr-provision-skill

OpenTofu ECR Provisioning

What I do

I guide you through provisioning AWS Elastic Container Registry (ECR) repositories following BETEKK infrastructure standards:

• ECR Repository Creation: Create ECR repositories with proper configuration and lifecycle policies
• GitHub OIDC Integration: Setup IAM roles for GitHub Actions to push/pull images
• State Management: Configure S3 backend for Terraform state management
• IAM Role Patterns: Implement standardized IAM roles with OIDC trust relationships
• Variable Naming: Follow BETEKK naming conventions for consistency
• Modular Structure: Use reusable modules for ECR and IAM resources
• Best Practices: Apply AWS Well-Architected Framework principles

When to use me

Use this skill when you need to:

• Provision a new ECR repository for Docker container images
• Setup GitHub Actions CI/CD for ECR integration
• Create standardized AWS infrastructure following BETEKK patterns
• Implement OIDC authentication for GitHub Actions
• Migrate existing ECR repositories to BETEKK standards
• Create reusable ECR infrastructure templates

Reference Implementation: ecr/betekk_probe_engine_main/

Prerequisites

• OpenTofu CLI installed: Install from https://opentofu.org/docs/intro/install/
• AWS Account: Valid AWS account with appropriate permissions
• AWS Credentials: Access keys or IAM role for authentication
• GitHub OIDC Provider: OIDC provider configured for GitHub Actions (optional, can be created as part of workflow)
• Basic OpenTofu/Terraform Knowledge: Understanding of HCL syntax and provider concepts

Provider Setup: Complete the opentofu-provider-setup skill first for AWS provider authentication and state backend configuration. This skill focuses on ECR-specific provisioning, not provider setup.

BETEKK Standards

Variable Naming Convention

Follow these naming patterns for consistency:

variable "environment" {
  description = "Environment type (e.g., dev, prod, uat)"
  type        = string
  default     = ""
}

variable "project_prefix" {
  description = "Project Prefix"
  type        = string
  default     = "betekk"
}

variable "repo_name" {
  description = "ECR Repository Name Prefix"
  type        = string
  default     = "betekk-<service-name>"
}

variable "aws_region" {
  description = "AWS region"
  type        = string
  default     = "ap-southeast-1"
}

variable "state_management_bucket_name" {
  description = "State Management Bucket Name"
  type        = string
  default     = "betekk-state-management-bucket"
}

variable "github_organization_old" {
  description = "Github Organization Name (old) for migration support"
  type        = string
  default     = "nus-cee"
}

variable "github_organization_new" {
  description = "Github Organization Name (new)"
  type        = string
  default     = "betekk"
}