variables:
  AWS_REGION: ap-southeast-1
  ECR_REPO: my-app
  IMAGE_TAG: $CI_COMMIT_SHORT_SHA

stages:
  - build
  - push

build-and-push:
  stage: push
  image: docker:24-dind
  services:
    - docker:24-dind
  variables:
    DOCKER_TLS_CERTDIR: "/certs"
  before_script:
    - apk add --no-cache aws-cli
    - aws ecr get-login-password --region $AWS_REGION |
        docker login --username AWS --password-stdin
        $AWS_ACCOUNT_ID.dkr.ecr.$AWS_REGION.amazonaws.com
  script:
    - docker build -t $AWS_ACCOUNT_ID.dkr.ecr.$AWS_REGION.amazonaws.com/$ECR_REPO:$IMAGE_TAG .
    - docker push $AWS_ACCOUNT_ID.dkr.ecr.$AWS_REGION.amazonaws.com/$ECR_REPO:$IMAGE_TAG
  only:
    - main

pipeline {
  agent any
  environment {
    AWS_REGION = 'ap-southeast-1'
    ECR_REPO   = 'my-app'
    REGISTRY   = "${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com"
  }
  stages {
    stage('ECR Login') {
      steps {
        withAWS(region: "${AWS_REGION}", credentials: 'aws-credentials') {
          sh '''
            aws ecr get-login-password --region $AWS_REGION |
            docker login --username AWS --password-stdin $REGISTRY
          '''
        }
      }
    }
    stage('Build') {
      steps {
        sh 'docker build -t $ECR_REPO:$BUILD_NUMBER .'
      }
    }
    stage('Push') {
      steps {
        sh '''
          docker tag $ECR_REPO:$BUILD_NUMBER $REGISTRY/$ECR_REPO:$BUILD_NUMBER
          docker push $REGISTRY/$ECR_REPO:$BUILD_NUMBER
        '''
      }
    }
  }
}

image: atlassian/default-image:4

pipelines:
  branches:
    main:
      - step:
          name: Build and Push to ECR
          services:
            - docker
          script:
            - pipe: atlassian/aws-ecr-push-image:2.2.0
              variables:
                AWS_ACCESS_KEY_ID: $AWS_ACCESS_KEY_ID
                AWS_SECRET_ACCESS_KEY: $AWS_SECRET_ACCESS_KEY
                AWS_DEFAULT_REGION: 'ap-southeast-1'
                IMAGE_NAME: 'my-app'