Use bazel rules to build docker image and push to GCR

Using bazel to build and push image result in reproducible builds.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=187252645

WORKSPACE

@@ -24,3 +24,25 @@ closure_repositories(
 load("//java/google/registry:repositories.bzl", "domain_registry_repositories")
 
 domain_registry_repositories()
+
+# Setup docker bazel rules
+git_repository(
+    name = "io_bazel_rules_docker",
+    remote = "https://github.com/bazelbuild/rules_docker.git",
+    tag = "v0.4.0",
+)
+
+load(
+    "@io_bazel_rules_docker//container:container.bzl",
+    "container_pull",
+    container_repositories = "repositories",
+)
+
+container_repositories()
+
+container_pull(
+  name = "java_base",
+  registry = "gcr.io",
+  repository = "distroless/java",
+  digest = "sha256:780ee786a774a25a4485f491b3e0a21f7faed01864640af7cebec63c46a0845a",
+)

java/google/registry/proxy/BUILD

@@ -2,6 +2,8 @@
 #   This package contains the code for the binary that proxies TCP traffic from
 #   the GCE/GKE to AppEngine.
 
+load("@io_bazel_rules_docker//container:container.bzl", "container_image", "container_push")
+
 package(
     default_visibility = ["//java/google/registry:registry_project"],
 )
@@ -48,3 +50,28 @@ java_binary(
         "@io_netty_tcnative",
     ],
 )
+
+container_image(
+    name = "proxy_image",
+    base = "@java_base//image",
+    entrypoint = [
+        "java",
+        "-jar",
+        "proxy_server_deploy.jar",
+    ],
+    files = [":proxy_server_deploy.jar"],
+    ports = [
+        "30000",
+        "30001",
+        "30002",
+    ],
+)
+
+container_push(
+    name = "proxy_push",
+    format = "Docker",
+    image = ":proxy_image",
+    registry = "gcr.io",
+    repository = "GCP_PROJECT/IMAGE_NAME",
+    tag = "bazel",
+)

java/google/registry/proxy/config/default-config.yaml

@@ -52,7 +52,7 @@ kms:
   cryptoKey: your-kms-cryptoKey
 
 epp:
-  port: 700
+  port: 30002
   relayHost: registry-project-id.appspot.com
   relayPath: /_dr/epp
 
@@ -122,7 +122,7 @@ epp:
     customQuota: []
 
 whois:
-  port: 43
+  port: 30001
   relayHost: registry-project-id.appspot.com
   relayPath: /_dr/whois
 

java/google/registry/proxy/kubernetes/proxy-deployment.yaml

@@ -20,7 +20,7 @@ spec:
           secretName: proxy-account
       containers:
       - name: proxy
-        image: INSERT_YOUR_IMAGE_NAME_HERE
+        image: gcr.io/GCP_PROJECT/IMAGE_NAME:bazel
         ports:
         - containerPort: 30000
           name: health-check
@@ -41,6 +41,7 @@ spec:
         volumeMounts:
         - name: service-account
           mountPath: /var/secrets/google
+        imagePullPolicy: Always
         args: ["--log"]
         env:
         - name: GOOGLE_APPLICATION_CREDENTIALS