Sign inSign up

yvogl/aws-eks-helm-deploy

By yvogl

•Updated over 2 years ago
Archived

EOL on Docker Hub — moved to ghcr.io/yves-vogl/aws-eks-helm-deploy

Image
Integration & delivery
Developer tools
0

10K+

yvogl/aws-eks-helm-deploy repository overview

⁠⚠️ Frozen at v1.3.0 — moved to GitHub Container Registry

This image (yvogl/aws-eks-helm-deploy) is end-of-life on Docker Hub. No further patches or releases will be pushed here.

v2.0 and onward are published exclusively to GitHub Container Registry:

⁠👉 ghcr.io/yves-vogl/aws-eks-helm-deploy

Existing v1.x consumers may continue to pull :1.3.0 indefinitely — the image stays available, but receives no updates.

⚠️ CVE notice: v1.3.0's python:3-alpine base image and the bundled awscli ~=1.32 carry known CVEs that will not be backported. v2.0 ships on python:3.13-slim-bookworm with Trivy + pip-audit gates on every PR, weekly Trivy rescans of published images, and Dependabot auto-rebuild on base-image updates.

⁠Bitbucket Pipelines Pipe: AWS EKS Helm Deploy

Deploy Helm⁠ charts to AWS Elastic Kubernetes Service (EKS)⁠ from Bitbucket Pipelines⁠. A thin, opinionated wrapper around helm upgrade --install that handles EKS authentication for you.

Source · Issues · Docs · Releases → https://github.com/yves-vogl/aws-eks-helm-deploy⁠

⁠Migrate to v2.0

When you are ready to upgrade, switch the image reference in your bitbucket-pipelines.yml:

- - pipe: docker://yvogl/aws-eks-helm-deploy:1.3.0
+ - pipe: docker://ghcr.io/yves-vogl/aws-eks-helm-deploy:2.0.0

v2.0 is a clean break — see the v1 → v2 migration guide⁠ for the full list of breaking changes, including:

  • Native AWS OIDC / IRSA authentication (no static keys required)
  • Helm OCI registry and repo:// chart support
  • helm --history-max integration for release-history pruning
  • Opt-out for injected Bitbucket build metadata (default flipped to opt-in)
  • Multi-arch image (linux/amd64 + linux/arm64), native ARM runners
  • Cosign keyless image signing + SBOM (SPDX + CycloneDX) + SLSA build provenance
  • 100% test coverage (unit + integration + acceptance tiers)
  • GitHub Actions release pipeline (driven by release-please v4)

⁠v1.3.0 quick reference (legacy)

For pipelines still pinning to :1.3.0 on Docker Hub:

image: atlassian/default-image:4

pipelines:
  branches:
    main:
      - step:
          name: Deploy to EKS
          deployment: production
          script:
            - pipe: docker://yvogl/aws-eks-helm-deploy:1.3.0
              variables:
                AWS_ACCESS_KEY_ID: $AWS_ACCESS_KEY_ID
                AWS_SECRET_ACCESS_KEY: $AWS_SECRET_ACCESS_KEY
                AWS_REGION: eu-central-1
                CLUSTER_NAME: my-eks-cluster
                CHART: ./charts/my-app
                RELEASE_NAME: my-app
                NAMESPACE: production
                CREATE_NAMESPACE: "true"
                WAIT: "true"
                TIMEOUT: "10m"
⁠v1.3.0 variables
VariableRequiredDefaultDescription
AWS_ACCESS_KEY_ID✓—AWS access key ID.
AWS_SECRET_ACCESS_KEY✓—AWS secret access key.
CLUSTER_NAME✓—Name of the target EKS cluster.
CHART✓—Path or name of the Helm chart to deploy.
AWS_REGIONeu-central-1AWS region the cluster lives in.
ROLE_ARN—IAM role to assume via STS before talking to EKS.
SESSION_NAME—STS session name when assuming ROLE_ARN.
RELEASE_NAME$CHARTName of the Helm release.
NAMESPACEdefaultTarget Kubernetes namespace.
CREATE_NAMESPACEfalsePass --create-namespace to Helm.
SET[]List of values forwarded to Helm as --set arguments.
VALUES[]Local values YAML files forwarded to Helm as --values arguments.
WAITfalseWait for resources to become ready (helm --wait).
TIMEOUT5mHelm timeout, Go duration syntax (e.g. 30s, 5m, 1h).
DEBUGfalseVerbose logging.

The full v1.3.0 reference, examples, and authentication notes live at https://github.com/yves-vogl/aws-eks-helm-deploy⁠.

⁠License

Apache License 2.0 — see LICENSE.txt⁠.

Tag summary

Content type

Image

Digest

sha256:630a82ae5…

Size

77.2 MB

Last updated

over 2 years ago

docker pull yvogl/aws-eks-helm-deploy