Merge pull request #27 from Clever/aws-container-registry

INFRA-2314: Also Push to ECR

Author: mohit

circleci/docker-publish

@@ -1,7 +1,8 @@
 #!/bin/bash
 
-# Logs into Docker registry, then builds and pushes docker image.
-# Docker image is tagged with 7 character git commit SHA.
+# Logs into Docker registry (DockerHub and optionally ECR),
+# then builds and pushes docker image. Docker image is tagged 
+# with 7 character git commit SHA.
 #
 # Usage:
 #
@@ -10,27 +11,57 @@
 
 set -e
 
-# User supplied args
-DOCKER_USER=$1
-if [[ -z $DOCKER_USER ]]; then echo "Missing arg1 DOCKER_USER" && exit 1; fi
-DOCKER_PASS=$2
-if [[ -z $DOCKER_PASS ]]; then echo "Missing arg2 DOCKER_PASS" && exit 1; fi
-DOCKER_EMAIL=$3
-if [[ -z $DOCKER_EMAIL ]]; then echo "Missing arg3 DOCKER_EMAIL" && exit 1; fi
-ORG=$4
-if [[ -z $ORG ]]; then echo "Missing arg4 ORG" && exit 1; fi
+check_hub_vars() {
+  # User supplied args
+  DOCKER_USER=$1
+  if [[ -z $DOCKER_USER ]]; then echo "Missing arg1 DOCKER_USER" && exit 1; fi
+  DOCKER_PASS=$2
+  if [[ -z $DOCKER_PASS ]]; then echo "Missing arg2 DOCKER_PASS" && exit 1; fi
+  DOCKER_EMAIL=$3
+  if [[ -z $DOCKER_EMAIL ]]; then echo "Missing arg3 DOCKER_EMAIL" && exit 1; fi
+  ORG=$4
+  if [[ -z $ORG ]]; then echo "Missing arg4 ORG" && exit 1; fi
+}
+
+push_hub_image() {
+  docker login -u $DOCKER_USER -p $DOCKER_PASS --email="$DOCKER_EMAIL"
+  docker push $ORG/$REPO:$SHORT_SHA
+}
+
+check_ecr_vars() {
+  # ECR required env vars
+  if [[ -z $ECR_ACCOUNT_ID ]]; then echo "Missing var for ECR: ECR_ACCOUNT_ID" && exit 1; fi
+  if [[ -z $ECR_REGION ]]; then echo "Missing var for ECR: ECR_REGION" && exit 1; fi
+  if [[ -z $ECR_PUSH_SECRET ]]; then echo "Missing var for ECR: ECR_PUSH_SECRET" && exit 1; fi
+}
+
+push_ecr_image(){
+	eval $(AWS_ACCESS_KEY_ID=$ECR_PUSH_ID AWS_SECRET_ACCESS_KEY=$ECR_PUSH_SECRET aws ecr --region $ECR_REGION get-login)
+	docker tag $ORG/$REPO:$SHORT_SHA $ECR_ACCOUNT_ID.dkr.ecr.$ECR_REGION.amazonaws.com/$REPO:$SHORT_SHA
+	docker push $ECR_ACCOUNT_ID.dkr.ecr.$ECR_REGION.amazonaws.com/$REPO:$SHORT_SHA
+}
 
 # Set automatically by CircleCI
 : ${CIRCLE_PROJECT_REPONAME?"Missing required env var"}
 REPO=$CIRCLE_PROJECT_REPONAME
 : ${CIRCLE_SHA1?"Missing required env var"}
 SHORT_SHA=${CIRCLE_SHA1:0:7}
 
-echo "Logging into DockerHub..."
-docker login -u $DOCKER_USER -p $DOCKER_PASS --email="$DOCKER_EMAIL"
+# Check CLI + env vars for DockerHub and (conditonally) ECR
+check_hub_vars
+if [ $ECR_PUSH_ID != "" ]; then
+  check_ecr_vars
+fi
 
 echo "Building docker image..."
 docker build -t $ORG/$REPO:$SHORT_SHA .
 
-echo "Pushing docker image..."
-docker push $ORG/$REPO:$SHORT_SHA
+echo "Pushing to DockerHub..."
+push_hub_image
+
+# TODO: fail if ECR_PUSH_ID is not set;
+# all repos eventually should dual publish (or explicitly opt-out)
+if [ $ECR_PUSH_ID != "" ]; then
+  echo "ECR access_id available. Pushing to ECR..."
+  push_ecr_image
+fi