SNOW-2389788: Moving docker images to artifactory (#2761)

Author: sfc-gh-pcyrek

Jenkinsfile

@@ -1,3 +1,5 @@
+@Library('pipeline-utils')
+import com.snowflake.DevEnvUtils
 import groovy.json.JsonOutput
 
 
@@ -10,10 +12,17 @@ timestamps {
       env.GIT_COMMIT = scmInfo.GIT_COMMIT
     }
 
+    stage('Authenticate Artifactory') {
+      script {
+        new DevEnvUtils().withSfCli {
+          sh "sf artifact oci auth"
+        }
+      }
+    }
+
     stage('Build') {
       withCredentials([
-        usernamePassword(credentialsId: '063fc85b-62a6-4181-9d72-873b43488411', usernameVariable: 'AWS_ACCESS_KEY_ID', passwordVariable: 'AWS_SECRET_ACCESS_KEY'),
-        string(credentialsId: 'a791118f-a1ea-46cd-b876-56da1b9bc71c',variable: 'NEXUS_PASSWORD')
+        usernamePassword(credentialsId: '063fc85b-62a6-4181-9d72-873b43488411', usernameVariable: 'AWS_ACCESS_KEY_ID', passwordVariable: 'AWS_SECRET_ACCESS_KEY')
         ]) {
         sh '''\
         |cd $WORKSPACE
@@ -63,7 +72,6 @@ timestamps {
       'Test Authentication': {
         stage('Test Authentication') {
           withCredentials([
-            string(credentialsId: 'a791118f-a1ea-46cd-b876-56da1b9bc71c', variable: 'NEXUS_PASSWORD'),
             string(credentialsId: 'sfctest0-parameters-secret', variable: 'PARAMETERS_SECRET')
           ]) {
             sh '''\

ci/set_base_image.sh

@@ -1,16 +1,16 @@
 #!/bin/bash -e
 #
 # Use the internal docker registry if running on Jenkins
+# Artifactory virtual repos support anonymous access; authentication
+# is handled via "sf artifact oci auth" in the Jenkinsfile.
 #
 set -o pipefail
-INTERNAL_REPO=nexus.int.snowflakecomputing.com:8086
-if [[ -n "$NEXUS_PASSWORD" ]]; then
+INTERNAL_REPO=artifactory.ci1.us-west-2.aws-dev.app.snowflake.com/internal-production-docker-snowflake-virtual
+if [[ -n "$JENKINS_HOME" ]]; then
     echo "[INFO] Pull docker images from $INTERNAL_REPO"
-    NEXUS_USER=${USERNAME:-jenkins}
-    docker login --username "$NEXUS_USER" --password "$NEXUS_PASSWORD" $INTERNAL_REPO
-    export BASE_IMAGE_MANYLINUX2014=nexus.int.snowflakecomputing.com:8086/docker/manylinux2014_x86_64:2025.02.12-1
-    export BASE_IMAGE_MANYLINUX2014AARCH64=nexus.int.snowflakecomputing.com:8086/docker/manylinux2014_aarch64:2025.02.12-1
-    export BASE_IMAGE_ROCKYLINUX9=nexus.int.snowflakecomputing.com:8086/docker/rockylinux:9
+    export BASE_IMAGE_MANYLINUX2014=$INTERNAL_REPO/docker/manylinux2014_x86_64:2025.02.12-1
+    export BASE_IMAGE_MANYLINUX2014AARCH64=$INTERNAL_REPO/docker/manylinux2014_aarch64:2025.02.12-1
+    export BASE_IMAGE_ROCKYLINUX9=$INTERNAL_REPO/docker/rockylinux:9
 else
     echo "[INFO] Pull docker images from public registry"
     export BASE_IMAGE_MANYLINUX2014=quay.io/pypa/manylinux2014_x86_64

ci/test_authentication.sh

@@ -25,5 +25,5 @@ docker run \
   -v $(cd $THIS_DIR/.. && pwd):/mnt/host \
   -v $WORKSPACE:/mnt/workspace \
   --rm \
-    nexus.int.snowflakecomputing.com:8086/docker/snowdrivers-test-external-browser-python:3 \
+    artifactory.ci1.us-west-2.aws-dev.app.snowflake.com/internal-production-docker-snowflake-virtual/docker/snowdrivers-test-external-browser-python:3 \
   "/mnt/host/ci/container/test_authentication.sh"