KEH1733: Add Shared ECR repo (#34)

Author: mwirikia

concourse/ci.yml

@@ -22,6 +22,13 @@ resources:
   type: key-value
   source:
     file: tag-output/tag
+- name: images-to-shared-ecr
+  type: registry-image
+  source:
+    repository: keh-tech-audit-tool-api
+    aws_role_arn: arn:aws:iam::((aws_account_sdp_((env)))):role/sdp-concourse-((env))
+    aws_account_id: ((aws_account_ecr_shared_account))
+    aws_region: eu-west-2
 
 # Define the common terraform task as an anchor
 terraform-task: &terraform-task
@@ -128,6 +135,9 @@ jobs:
       inputs:
         - name: resource-repo
         - name: github-release-tag
+      outputs:
+        - name: built-images
+        - name: release-tag-output
       params:
         aws_account_id: ((aws_account_sdp_((env))))
         aws_role_arn: arn:aws:iam::((aws_account_sdp_((env)))):role/sdp-concourse-((env))
@@ -151,6 +161,13 @@ jobs:
           source ./resource-repo/concourse/scripts/assume_role.sh
           ./resource-repo/concourse/scripts/build_image.sh
     timeout: 10m
+  - put: images-to-shared-ecr
+    inputs:
+      - built-images
+      - release-tag-output
+    params:
+      image: built-images/tech_audit_tool_api.tar
+      additional_tags: release-tag-output/tag
   - <<: *terraform-task
     params:
       secrets: ((sdp_((env))_secrets_tat_api))

concourse/scripts/build_image.sh

@@ -12,3 +12,6 @@ podman build -t ${container_image}:${tag} resource-repo/aws_lambda_script/
 podman tag ${container_image}:${tag} ${aws_account_id}.dkr.ecr.eu-west-2.amazonaws.com/${container_image}:${tag}
 
 podman push ${aws_account_id}.dkr.ecr.eu-west-2.amazonaws.com/${container_image}:${tag}
+
+echo "Saving image as tar for next task..."
+podman save --format=oci-dir "${container_image}:${tag}" -o built-images/tech_audit_tool_api.tar