-
Notifications
You must be signed in to change notification settings - Fork 20
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Auto-create ECR registries before docker push
- Loading branch information
1 parent
64d1c62
commit 168e807
Showing
5 changed files
with
130 additions
and
4 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,80 @@ | ||
| package leeway | ||
|
|
||
| import ( | ||
| "context" | ||
| "errors" | ||
| "fmt" | ||
|
|
||
| "os/exec" | ||
|
|
||
| "github.com/aws/aws-sdk-go-v2/aws" | ||
| "github.com/aws/aws-sdk-go-v2/config" | ||
| "github.com/aws/aws-sdk-go-v2/service/ecr" | ||
| "github.com/aws/aws-sdk-go-v2/service/ecr/types" | ||
| ) | ||
|
|
||
| type ImageAdapter interface { | ||
| Create(imageName string) error | ||
| Sign(imageName, profileARN string) error | ||
| } | ||
|
|
||
| // ECRAdapter implements the ImageAdapter interface for AWS ECR | ||
| type ECRAdapter struct { | ||
| ecrClient *ecr.Client | ||
| } | ||
|
|
||
| // NewECRAdapter initializes an ECRAdapter with an AWS ECR client | ||
| func NewECRAdapter() (*ECRAdapter, error) { | ||
| cfg, err := config.LoadDefaultConfig(context.TODO()) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("unable to load SDK config, %v", err) | ||
| } | ||
|
|
||
| client := ecr.NewFromConfig(cfg) | ||
| return &ECRAdapter{ | ||
| ecrClient: client, | ||
| }, nil | ||
| } | ||
|
|
||
| // Create checks if the ECR image exists and creates it if it doesn't | ||
| func (e *ECRAdapter) Create(imageName string) error { | ||
| _, err := e.ecrClient.DescribeImages(context.TODO(), &ecr.DescribeImagesInput{ | ||
| RepositoryName: aws.String(imageName), | ||
| }) | ||
| if err == nil { | ||
| fmt.Printf("Image %s already exists\n", imageName) | ||
| return nil | ||
| } | ||
|
|
||
| if !isRepositoryNotFoundErr(err) { | ||
| return fmt.Errorf("failed to check if ECR image %s exists: %w", imageName, err) | ||
| } | ||
|
|
||
| _, err = e.ecrClient.CreateRepository(context.TODO(), &ecr.CreateRepositoryInput{ | ||
| RepositoryName: aws.String(imageName), | ||
| }) | ||
| if err != nil { | ||
| return fmt.Errorf("failed to create ECR image: %w", err) | ||
| } | ||
|
|
||
| fmt.Printf("Image %s created successfully\n", imageName) | ||
| return nil | ||
| } | ||
|
|
||
| // Sign uses the notation tool to sign the ECR image | ||
| func (e *ECRAdapter) Sign(imageName, profileARN string) error { | ||
| cmd := exec.Command("notation", "sign", "--profile", profileARN, imageName) | ||
| output, err := cmd.CombinedOutput() | ||
| if err != nil { | ||
| return fmt.Errorf("failed to sign the image: %v, output: %s", err, string(output)) | ||
| } | ||
|
|
||
| fmt.Printf("Image %s signed successfully\n", imageName) | ||
| return nil | ||
| } | ||
|
|
||
| // isImageNotFoundErr checks if the error is an ImageNotFoundException | ||
| func isRepositoryNotFoundErr(err error) bool { | ||
| var notFoundErr *types.RepositoryNotFoundException | ||
| return errors.As(err, ¬FoundErr) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters