From e551b3ba2bd477f5b0bd5d988bfed1292b0c5b20 Mon Sep 17 00:00:00 2001
From: openmindev <147775420+openminddev@users.noreply.github.com>
Date: Sun, 19 Apr 2026 18:56:45 -0700
Subject: [PATCH] Migrate release workflow to Amazon ECR

Rename workflow and switch publishing from Docker Hub to Amazon ECR Public. Add aws-actions/configure-aws-credentials and replace docker/login-action with aws-actions/amazon-ecr-login; update image names and build outputs to public.ecr.aws/b8k9c8n5/openmind/kokoro-fastapi. Bump action versions (actions/checkout@v5, docker/setup-buildx-action@v3) and add environment/url metadata for the create-manifest job.
---
 .github/workflows/release.yml | 29 +++++++++++++++++++----------
 1 file changed, 19 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bfb9bd69..e5b8286b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,4 +1,4 @@
-name: Kokoro FastAPI Release
+name: "ECR Release Workflow"
 
 on:
   push:
@@ -12,27 +12,33 @@ on:
 jobs:
   build-arm64:
     runs-on: ubuntu-22.04-arm
+
     outputs:
       image-digest: ${{ steps.build.outputs.digest }}
       metadata: ${{ steps.meta.outputs.json }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v3
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE }}
+          aws-region: ${{ secrets.AWS_REGION }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
-      - name: Login to Docker Hub
-        uses: docker/login-action@v2
+      - name: Login to Amazon ECR Public
+        uses: aws-actions/amazon-ecr-login@v2
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          registry-type: public
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
         uses: docker/metadata-action@v4
         with:
-          images: openmindagi/kokoro-fastapi
+          images: public.ecr.aws/b8k9c8n5/openmind/kokoro-fastapi
           tags: |
             type=semver,pattern={{version}},prefix=v
             type=semver,pattern={{major}}.{{minor}},prefix=v
@@ -48,11 +54,14 @@ jobs:
           file: ./docker/gpu/Dockerfile
           platforms: linux/arm64
           labels: ${{ steps.meta.outputs.labels }}
-          outputs: type=image,name=openmindagi/kokoro-fastapi,push-by-digest=true,name-canonical=true,push=true
+          outputs: type=image,name=public.ecr.aws/b8k9c8n5/openmind/kokoro-fastapi,push-by-digest=true,name-canonical=true,push=true
 
   create-manifest:
     runs-on: ubuntu-latest
     needs: [build-arm64]
+    environment:
+      name: ${{ startsWith(github.ref, 'refs/tags/v') && 'production' || 'staging' }}
+      url: https://gallery.ecr.aws/b8k9c8n5/openmind/kokoro-fastapi
     steps:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v2
@@ -74,5 +83,5 @@ jobs:
 
             docker buildx imagetools create \
               --tag $tag \
-              openmindagi/kokoro-fastapi@${{ needs.build-arm64.outputs.image-digest }}
+              public.ecr.aws/b8k9c8n5/openmind/kokoro-fastapi@${{ needs.build-arm64.outputs.image-digest }}
           done