This turned out to be much larger than planned. There's still a bit to do but it seemed like a good point to get these changes in, the rest can be done separately
Use the branch / environment in resource naming to help with identification and to allow more that one deployment per account
Export the Repository URI from the base stack CloudFormation template so it can be used in package and deploy components
Export the Userdetails role ARN from the base stack so it can be used in package and deploy components
Set AUTO_DEPLOY to true by default, then false in production
Set Slack notification to false by default, true in production
Moved all variable gathering to the export-config build projects, all config is assembled here and can then be accessed by any downstream actions and codebuild projects
Remove hard coded hosted zone and domain and add new configuration values for each environment to config.ini
Remove hardcoded values from update-kubeconfig command
Renamed container repo variable from REPO to ECR_REPO. REPO was already being used for the code repo
Remove hardcoded ECR_REPO var initialisation, the value is now exported from the base stack
Updated eksctl create iamserviceaccount command to work with new IAM role, replaced hardcoded values
Removed CLI command to set CERTIFICATE_ARN, this is a now a config value for each environment
Reorganised and removed hardcoded values from the helm upgrade command
Remove hardcoded IMAGE_TAG from deployment codebuild project
Remove hardcoded config values from docker package commands
Upgraded package container to BUILD_GENERAL1_MEDIUM
Remove the app deploy CodeBuild project from the package pipeline, it's not used here
Add IMAGE_NAME and IMAGE_TAG as config values
Remove pre-Bedrock config values from config.ini, these are no longer used
This turned out to be much larger than planned. There's still a bit to do but it seemed like a good point to get these changes in, the rest can be done separately
update-kubeconfig
commandeksctl create iamserviceaccount
command to work with new IAM role, replaced hardcoded valueshelm upgrade
command