Added kaniko support to build & publish to ecr

cmd/kaniko-ecr/main.go

@@ -0,0 +1,146 @@
+package main
+
+import (
+	"fmt"
+	"io/ioutil"
+	"os"
+
+	"github.com/joho/godotenv"
+	"github.com/pkg/errors"
+	"github.com/sirupsen/logrus"
+	"github.com/urfave/cli"
+
+	kaniko "github.com/drone/drone-kaniko"
+)
+
+const (
+	accessKeyEnv     string = "AWS_ACCESS_KEY_ID"
+	secretKeyEnv     string = "AWS_SECRET_ACCESS_KEY"
+	dockerConfigPath string = "/kaniko/.docker/config.json"
+)
+
+var (
+	version = "unknown"
+)
+
+func main() {
+	// Load env-file if it exists first
+	if env := os.Getenv("PLUGIN_ENV_FILE"); env != "" {
+		godotenv.Load(env)
+	}
+
+	app := cli.NewApp()
+	app.Name = "kaniko docker plugin"
+	app.Usage = "kaniko docker plugin"
+	app.Action = run
+	app.Version = version
+	app.Flags = []cli.Flag{
+		cli.StringFlag{
+			Name:   "dockerfile",
+			Usage:  "build dockerfile",
+			Value:  "Dockerfile",
+			EnvVar: "PLUGIN_DOCKERFILE",
+		},
+		cli.StringFlag{
+			Name:   "context",
+			Usage:  "build context",
+			Value:  ".",
+			EnvVar: "PLUGIN_CONTEXT",
+		},
+		cli.StringSliceFlag{
+			Name:     "tags",
+			Usage:    "build tags",
+			Value:    &cli.StringSlice{"latest"},
+			EnvVar:   "PLUGIN_TAGS",
+			FilePath: ".tags",
+		},
+		cli.StringSliceFlag{
+			Name:   "args",
+			Usage:  "build args",
+			EnvVar: "PLUGIN_BUILD_ARGS",
+		},
+		cli.StringFlag{
+			Name:   "target",
+			Usage:  "build target",
+			EnvVar: "PLUGIN_TARGET",
+		},
+		cli.StringFlag{
+			Name:   "repo",
+			Usage:  "docker repository",
+			EnvVar: "PLUGIN_REPO",
+		},
+		cli.StringSliceFlag{
+			Name:   "custom-labels",
+			Usage:  "additional k=v labels",
+			EnvVar: "PLUGIN_CUSTOM_LABELS",
+		},
+		cli.StringFlag{
+			Name:   "registry",
+			Usage:  "ECR registry",
+			EnvVar: "PLUGIN_REGISTRY",
+		},
+		cli.StringFlag{
+			Name:   "access-key",
+			Usage:  "ECR access key",
+			EnvVar: "PLUGIN_ACCESS_KEY",
+		},
+		cli.StringFlag{
+			Name:   "secret-key",
+			Usage:  "ECR secret key",
+			EnvVar: "PLUGIN_SECRET_KEY",
+		},
+	}
+
+	if err := app.Run(os.Args); err != nil {
+		logrus.Fatal(err)
+	}
+}
+
+func run(c *cli.Context) error {
+	err := setupECRAuth(c.String("access-key"), c.String("secret-key"), c.String("registry"))
+	if err != nil {
+		return err
+	}
+
+	plugin := kaniko.Plugin{
+		Build: kaniko.Build{
+			Dockerfile: c.String("dockerfile"),
+			Context:    c.String("context"),
+			Tags:       c.StringSlice("tags"),
+			Args:       c.StringSlice("args"),
+			Target:     c.String("target"),
+			Repo:       c.String("repo"),
+			Labels:     c.StringSlice("custom-labels"),
+		},
+	}
+	return plugin.Exec()
+}
+
+func setupECRAuth(accessKey, secretKey, registry string) error {
+	if accessKey == "" {
+		return fmt.Errorf("Access key must be specified")
+	}
+	if secretKey == "" {
+		return fmt.Errorf("Secret key must be specified")
+	}
+	if registry == "" {
+		return fmt.Errorf("Registry must be specified")
+	}
+
+	err := os.Setenv(accessKeyEnv, accessKey)
+	if err != nil {
+		return errors.Wrap(err, fmt.Sprintf("failed to set %s environment variable", accessKeyEnv))
+	}
+
+	err = os.Setenv(secretKeyEnv, secretKey)
+	if err != nil {
+		return errors.Wrap(err, fmt.Sprintf("failed to set %s environment variable", secretKeyEnv))
+	}
+
+	jsonBytes := []byte(fmt.Sprintf(`{"credStore": "ecr-login", "credHelpers": {"%s": "ecr-login"}}`, registry))
+	err = ioutil.WriteFile(dockerConfigPath, jsonBytes, 0644)
+	if err != nil {
+		return errors.Wrap(err, "failed to create docker config file")
+	}
+	return nil
+}

cmd/kaniko-gcr/main.go

@@ -15,7 +15,8 @@ import (
 
 const (
 	// GCR JSON key file path
-	gcrKeyPath string = "/kaniko/gcr.json"
+	gcrKeyPath     string = "/kaniko/gcr.json"
+	gcrEnvVariable string = "GOOGLE_APPLICATION_CREDENTIALS"
 )
 
 var (
@@ -115,7 +116,6 @@ func run(c *cli.Context) error {
 	return plugin.Exec()
 }
 
-// Create the docker config file for authentication
 func setupGCRAuth(jsonKey string) error {
 	if jsonKey == "" {
 		return fmt.Errorf("GCR JSON key must be specified")
@@ -126,6 +126,9 @@ func setupGCRAuth(jsonKey string) error {
 		return errors.Wrap(err, "failed to write GCR JSON key")
 	}
 
-	os.Setenv("GOOGLE_APPLICATION_CREDENTIALS", gcrKeyPath)
+	err = os.Setenv(gcrEnvVariable, gcrKeyPath)
+	if err != nil {
+		return errors.Wrap(err, fmt.Sprintf("failed to set %s environment variable", gcrEnvVariable))
+	}
 	return nil
 }