Permalink
Browse files

Use bazel rules to build docker image and push to GCR

Using bazel to build and push image result in reproducible builds.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=187252645
  • Loading branch information...
jianglai committed Feb 28, 2018
1 parent 9e3fb8b commit 753a269357a9343f77b32b1ac385acf09ba174ac
View
@@ -24,3 +24,25 @@ closure_repositories(
load("//java/google/registry:repositories.bzl", "domain_registry_repositories")
domain_registry_repositories()
# Setup docker bazel rules
git_repository(
name = "io_bazel_rules_docker",
remote = "https://github.com/bazelbuild/rules_docker.git",
tag = "v0.4.0",
)
load(
"@io_bazel_rules_docker//container:container.bzl",
"container_pull",
container_repositories = "repositories",
)
container_repositories()
container_pull(
name = "java_base",
registry = "gcr.io",
repository = "distroless/java",
digest = "sha256:780ee786a774a25a4485f491b3e0a21f7faed01864640af7cebec63c46a0845a",
)
@@ -2,6 +2,8 @@
# This package contains the code for the binary that proxies TCP traffic from
# the GCE/GKE to AppEngine.
load("@io_bazel_rules_docker//container:container.bzl", "container_image", "container_push")
package(
default_visibility = ["//java/google/registry:registry_project"],
)
@@ -48,3 +50,28 @@ java_binary(
"@io_netty_tcnative",
],
)
container_image(
name = "proxy_image",
base = "@java_base//image",
entrypoint = [
"java",
"-jar",
"proxy_server_deploy.jar",
],
files = [":proxy_server_deploy.jar"],
ports = [
"30000",
"30001",
"30002",
],
)
container_push(
name = "proxy_push",
format = "Docker",
image = ":proxy_image",
registry = "gcr.io",
repository = "GCP_PROJECT/IMAGE_NAME",
tag = "bazel",
)
@@ -52,7 +52,7 @@ kms:
cryptoKey: your-kms-cryptoKey
epp:
port: 700
port: 30002
relayHost: registry-project-id.appspot.com
relayPath: /_dr/epp
@@ -122,7 +122,7 @@ epp:
customQuota: []
whois:
port: 43
port: 30001
relayHost: registry-project-id.appspot.com
relayPath: /_dr/whois

This file was deleted.

Oops, something went wrong.

This file was deleted.

Oops, something went wrong.
@@ -20,7 +20,7 @@ spec:
secretName: proxy-account
containers:
- name: proxy
image: INSERT_YOUR_IMAGE_NAME_HERE
image: gcr.io/GCP_PROJECT/IMAGE_NAME:bazel
ports:
- containerPort: 30000
name: health-check
@@ -41,6 +41,7 @@ spec:
volumeMounts:
- name: service-account
mountPath: /var/secrets/google
imagePullPolicy: Always
args: ["--log"]
env:
- name: GOOGLE_APPLICATION_CREDENTIALS

0 comments on commit 753a269

Please sign in to comment.