Jenkins and ECR

Jenkins and ECR

First of all, create a repository in the Amazon ECR Repositories
I get a URL as follow
703986672610.dkr.ecr.us-west-2.amazonaws.com/netsuite
Find my AWS security and key, it seems I do not have permission to generate one.
[AWS Management Console] —> [My Security Credentials]
I get my credentials from AWS, in my case the contents are as following
> cat ~/.aws/credentials
[default]
aws_access_key_id = AKIAxxxxxxxxxxx
aws_secret_access_key = B9BQoF5mxxxxxxxxxxxxxxxxxxxx
> cat ~/.aws/config
[default]
region = us-west-2
Here is the steps for install the AWS-cli if you do not have one yet
> sudo apt install python3-pip
> pip3 install awscli --upgrade --user
Test my permissions
> aws ecr get-login --no-include-email
It will generate a login command and I just copy and run that
Then I can list all the repo I have
> aws ecr describe-repositories
On my EC2 machine, I set the .aws then I can list the repositories as well.
Try to build the local Jenkins Docker build ENV for testing
> docker build -f deployment/jenkins/Dockerfile.build -t jenkins-test:1.0 .
Run the building ENV
> docker run -ti --name jenkins-test jenkins-test:1.0 /bin/bash
Remove the application if needed
> docker rm jenkins-test
Some important configuration change to make it working on Jenkins Pipeline
In the Dockerfile.build which prepare the build ENV Docker Image, I add the tool AWS command line
RUN apt-get install -y python3-pip
RUN pip3 install awscli --upgrade --user
RUN ln -s /root/.local/bin/aws /usr/local/bin/aws
I configure the .aws credentials information on the Jenkins machine. I will mapping that to the Docker as well in the pipeline configuration
dockerfile {
    filename 'deployment/jenkins/Dockerfile.build'
       args '-u root:root -v /home/ubuntu/.aws:/root/.aws -v $HOME/.m2:/root/.m2 -v /var/run/docker.sock:/var/run/docker.sock'
}
I am using Docker to start jenkins, so the user is ubuntu on Master, jenkins was starting with root in Docker, then the build ENV is using root as user as well. So there is some permission and users conflicts. I will fix that later.
Here is the Build Process for the Docker
    stage('Build Docker Image') {
      steps {
    sh '''
           docker build -f deployment/docker/Dockerfile -t xxxxxxx.dkr.ecr.us-west-2.amazonaws.com/netsuite:1.5 .
           rm -fr target
       '''
      }
    }
Here is the steps to send to ECR
    stage('Release to ECR') {
      steps {
    sh '''
    $(aws ecr get-login --no-include-email)
    docker push xxxxxxxxx.dkr.ecr.us-west-2.amazonaws.com/netsuite:1.5
       '''
      }
    }

References:
https://docs.aws.amazon.com/AmazonECR/latest/userguide/ECR_AWSCLI.html#AWSCLI_push_image
https://medium.com/@bhadrajatin/ecr-login-from-jenkins-using-pipeline-and-docker-222b696694e0
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-envvars.html