mardymark

# The -f is there to force the tag if it already exists
git tag -f "publish->my-image-name" <commit_sha>
git push --tags -f

mardymark

version: 2
jobs:
  docker-image-publish:
    steps:
      - setup_remote_docker
      - checkout
      - run:
          name: "Build"
          command: "docker build -t my-repo/my-image-name:and-tag ."
      - run:

mardymark

func decryptSecretFile(secretFile string) (string, error) {

  secretBytes, err := ioutil.ReadFile(secretFile)
  if err != nil {
    return "", err
  }

  kmsClient := kms.New(session.New(&aws.Config{
    Region: aws.String("us-east-1"),
  }))

mardymark

func downloadSecret(secretFileName string) (string, error) {

  s3Downloader := s3manager.NewDownloader(session.New(&aws.Config{
    Region: aws.String("us-east-1"),
  }))

  f, err := os.Create(secretName)
  if err != nil {
    return "", err
  }

mardymark

func uploadSecret(secretFileName string) error {

  s3Uploader := s3manager.NewUploader(session.New(&aws.Config{
    Region: aws.String("us-east-1"),
  }))

  reader, err := os.Open(secretFileName)
  if err != nil {
    return err
  }

mardymark

func encryptSecret(name string, value string) (string, error) {

  kmsKeyARN := "arn:aws:kms:us-east-1:012345678910:key/0000000-0000-0000-0000-000000000000"
  kmsClient := kms.New(session.New(&aws.Config{
    Region: aws.String("us-east-1"),
  }))

  params := &kms.EncryptInput{
    KeyId:     aws.String(kmsKeyARN),
    Plaintext: []byte(value),