imjasonh/terraform-playground
1
0
Fork 0
mirror of https://github.com/imjasonh/terraform-playground synced 2026-07-11 08:59:39 +00:00
Code Activity
terraform-playground/image-copy
History
Jason Hall 03ebd8b9ba
it works now
2023-03-31 14:17:12 -04:00
..
cmd/app it works now 2023-03-31 14:17:12 -04:00
hack initial commit 2023-03-31 13:40:37 -04:00
iac it works now 2023-03-31 14:17:12 -04:00
go.mod initial commit 2023-03-31 13:40:37 -04:00
go.sum initial commit 2023-03-31 13:40:37 -04:00
README.md initial commit 2023-03-31 13:40:37 -04:00

README.md

image-copy

This sets up a Cloud Run app to listen for registry.push events to a private Chainguard Registry group, and mirrors those new images to a repository in Google Artifact Registry.

The Terraform does everything:

  • builds the mirroring app into an image using ko_build
  • deploys the app to a Cloud Run service
  • sets up a Chainguard Identity with permissions to pull from the private cgr.dev repo
  • allows the Cloud Run service's SA to assume the puller identity
  • sets up a subscription to notify the Cloud Run service when pushes happen to cgr.dev