Uffizzi Platform Add Github Container Registry Integration

[7R41N33]

We need support for GHCR in the same way we have support for GCR, ACR etc Compose will need to support pulling images from GHCR - same integration functionality as the other registries

[NealArw]

1. Can't add file with GHCR repo:

Example of the file:

services:
  webhooks-test-app:
    image: ghcr.io/nealarw/webhook-test-app:latest
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres

x-uffizzi-ingress:
  service: webhooks-test-app
  port: 80

x-uffizzi-continuous-preview:
  share_to_github: true
  delete_preview_after: 99h
  tag_pattern: uffizzi_request_*
  delete_preview_when_image_tag_is_updated: true
  deploy_preview_when_image_tag_is_created: true
  delete_preview_when_pull_request_is_closed: true
  deploy_preview_when_pull_request_is_opened: true

Result:

2. What type of credentials should I connect to deploy from GHCR?

[sergeykirillovdb]

https://gitlab.com/dualbootpartners/idyl/uffizzi_app/-/merge_requests/1040/diffs

[sergeykirillovdb]

https://github.com/UffizziCloud/uffizzi_platform/pull/39

[NealArw]

Deploynig from GHCR from compose file does not work:

File:

services:
  webhooks-test-app:
    image: ghcr.io/nealarw/webhook-test-app:latest
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres

x-uffizzi-ingress:
  service: webhooks-test-app
  port: 80

x-uffizzi-continuous-preview:
  share_to_github: true
  delete_preview_after: 99h
  tag_pattern: uffizzi_request_*
  delete_preview_when_image_tag_is_updated: true
  deploy_preview_when_image_tag_is_created: true
  delete_preview_when_pull_request_is_closed: true
  deploy_preview_when_pull_request_is_opened: true  

[sergeykirillovdb]

https://github.com/UffizziCloud/uffizzi_platform/pull/39 - updated container image parsing https://github.com/UffizziCloud/uffizzi_app/pull/167 - in core the same

[NealArw]

:point_right: 1.

• Push package into GHCR with latest tag
• Add compose into Uffizzi
• Push feature tag into GHCR (tag should start with uffizzi_request_)

Result: Deployment does not start.

services:
  webhooks-test-app:
    image: ghcr.io/nealarw/webhook-test-app:latest
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres

x-uffizzi-ingress:
  service: webhooks-test-app
  port: 80

x-uffizzi-continuous-preview:
  share_to_github: true
  delete_preview_after: 1h
  tag_pattern: uffizzi_request_*
  delete_preview_when_image_tag_is_updated: true
  deploy_preview_when_image_tag_is_created: true
  delete_preview_when_pull_request_is_closed: true
  deploy_preview_when_pull_request_is_opened: true

[sergeykirillovdb]

Important !

Conditions to webhook packages working

1. Github application has access to read packages (Permissions tab in the Github Application settings). Url example: https://github.com/organizations/UffizziCloud/settings/apps/uffizzi-dev/permissions
2. Github application is subscribed to "Registry package" event. The same tab as 1.
3. Package connected to the repository
4. Repository has installed Github application

[NealArw]

TESTED - OK

[NealArw]

TESTED on prod - OK