mergermarket/cdflow-build-docker-ecr

cdflow2 build plugin for building docker images and pushing them to AWS ECR. Performs the following steps:

Gets an auth token for ECR based on IAM credentials in the environment.
Does a docker login with that auth token in order to allow a docker image to be pushed to the repo.
Does a docker build to create a docker image from the Dockerfile in the root of the project.
Does a docker push to push the image to the ECR repository.
Provides an image release metadata key so the resulting docker image can be used from terraform - via a terraform map variable named the same as the build (i.e. the key under builds in the cdflow.yaml - "docker" is a good choice)

Requires a cdflow2 config container with support for providing ECR config - e.g. mergermarket/cdflow2-config-acuris.

Usage

`cdflow2.yaml`:

This example uses mergermarket/cdflow2-config-acuris, which supports creating an ECR repository and providing the config for it as environment variables to the build (this config contianer is only sutiable for developing within Acuris).

version: 2
config:
  image: mergermarket/cdflow2-config-acuris
  params:
    account_prefix: myaccountprefix
    team: myteam
builds:
  docker:
    image: mergermarket/cdflow2-build-docker-ecr
terraform:
  image: hashicorp/terraform

`Dockerfile`

Will build a docker image from a Dockerfile in the root of the project. This could be anything, in this case a simple hello world.

FROM hello-world

Config container support

At time of writing the only config container that supports this build plugin is:

mergermarket/cdflow2-config-acuris.

Adding support in a config container

This container advertises a single "ecr" need when it is configured for a build. A config container in its configureRelease hook should ensure that an ECR repository exists and is provided in the environment, along with AWS credentials that can push to it and a region:

ECR_REPOSITORY - the address of the repository of the form <account-number>.dkr.ecr.<region>.amazonaws.com/<repo-name>)
AWS_ACCESS_KEY_ID
AWS_SECRET_ACCESS_KEY
AWS_SESSION_TOKEN (for temporary credentials only)
AWS_REGION

alexconlin/cdflow2-build-docker-ecr