Add ECR authentication support to image-builder

[csweichel]

Description

This PR adds ECR auth support to image builder. For an ECR registry to become accessible, it needs to be listed explicitly in the build request, e.g. using defaultBaseImageRegistryWhitelist.

Building images with private ECR images does not work yet, only pulling them directly.

Summary generated by Copilot

🤖 Generated by Copilot at 50edde1

This pull request adds support for additional authentication for Amazon ECR repositories in the image-builder-mk3 and image-builder-api components. This feature allows users to access private ECR repositories using IAM roles for service accounts. It also updates the configuration and installation packages to enable this feature. It modifies the auth, orchestrator, and resolve packages in the image-builder-mk3 component, and the config package in the image-builder-api component. It also changes the files components/image-builder-mk3/go.mod, components/image-builder-api/go/config/config.go, install/installer/pkg/components/image-builder-mk3/configmap.go, and install/installer/pkg/config/v1/config.go.

How to test

This change is deployed to dev-internal.
There's a test image at 422899872803.dkr.ecr.eu-central-1.amazonaws.com/private-repo-demo:latest.

• branch with that image configured here
• branch with a Dockerfile using that image here

Documentation

Preview status

gitpod:summary

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold