Sign inSign up

interrobangc/drone-ecr-auth

By interrobangc

•Updated almost 8 years ago

auth to ecr instance

Image
0

10K+

interrobangc/drone-ecr-auth repository overview

⁠Drone ECR authenticator

⁠The problem

Drone cannot use ECR private images for the build phase, since auth_config uses the basic authentication process for docker, which isn't working with ECR. ECR requires an AWS authentication process with keys that rotate every 12 hours.

⁠Usage

Run the container as the first build step in Drone Provide the container a role with policy that has premissions for ecr:*, or provide keys with the environment variables of the container. Use it to pull the build container, which will be available to the build phase. Here's a drone pipline example:

pipeline:
  ecr-auth:
    image: omerxx/drone-ecr-auth
    pull: true
    privileged: true
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    commands:
      - $(aws ecr get-login --no-include-email --region us-east-1)
      - docker pull <account_id>.dkr.ecr.us-east-1.amazonaws.com/build_image

  build:
    image: <account_id>.dkr.ecr.us-east-1.amazonaws.com/build_image
    .
    .
    .
⁠Another example with AWS keys:
pipeline:
  ecr-auth:
    image: omerxx/drone-ecr-auth
    pull: true
    privileged: true
    environment:
      - AWS_ACCESS_KEY_ID=MYKEYS
      - AWS_SECRET_ACCESS_KEY=MYSECRET
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    commands:
      - $(aws ecr get-login --no-include-email --region us-east-1)
      - docker pull <account_id>.dkr.ecr.us-east-1.amazonaws.com/build_image

  build:
    image: <account_id>.dkr.ecr.us-east-1.amazonaws.com/build_image
    .
    .
    .

⁠How it works

This is an alpine based python light image, that holds awscli tool and ready to work with aws keys

Tag summary

Content type

Image

Digest

Size

91.8 MB

Last updated

almost 8 years ago

docker pull interrobangc/drone-ecr-auth