📦 Implement ECR pull through caching for GHCR hosted images

[jacobwoffenden]

User Story

As an Analytical Platform engineering
I want to use ECR pull through caching for images hosted on GHCR
So that repeated downloads do not go through the NAT gateways

Value / Purpose

NAT Gateways in APC have high usage (cause TBC #6750), but something we could do to maybe lower this is implement ECR pull through caching for images that are pull frequently, such as the actions runner image

Useful Contacts

@jacobwoffenden

User Types

Platform Engineering

Hypothesis

If we... [do a thing]
Then... [this will happen]

Proposal

Implement ECR pull through caching https://docs.aws.amazon.com/AmazonECR/latest/userguide/pull-through-cache-creating-rule.html

Additional Information

No response

Definition of Done

• GHCR token generated and stored in Secrets Manager
• ECR pull through cache rule created for GHCR
• Logic implemented in charts
  • analytical-platform-actions-runner