amazon-web-services - 如何在 Jenkins 中将 Docker 镜像推送到 ECR？

Question

我正在和詹金斯一起工作。我正在尝试将图像推送到ECR。我正在使用本地 Docker 来构建图像。

下面是我的詹金斯文件：

pipeline {
    agent any

    stages {
        stage('Build') {
            steps {
                bat  'docker build -t sampleapp -f SampleApp/Dockerfile .'
            }
        }
        stage('Push image') {
         steps {
           withDockerRegistry([url: "https://536703334988.dkr.ecr.ap-southeast-2.amazonaws.com/test-repository",credentialsId: "ecr:ap-southeast-2:demo-ecr-credentials"]) {
           bat 'docker push sampleapp:latest'
               }
        }
        stage('Deploy') {
            steps {
                echo 'Deploying....'
            }
        }
    }
}

在上面的代码中，我能够构建和创建图像。在第二阶段，我面临着问题。我收到以下错误：

$ docker login -u AWS -p ******** https://536703334988.dkr.ecr.ap-southeast-2.amazonaws.com/test-repository

WARNING! Using --password via the CLI is insecure. Use --password-stdin.  
Login Succeeded
C:\Program Files (x86)\Jenkins\workspace\SampleAppPipeLine>docker push sampleapp:latest 
The push refers to repository [docker.io/library/sampleapp]
a160522d6d0e: Preparing
2e2c2606bd45: Preparing
9b0a482c69b1: Preparing
995a0cc6a5f6: Preparing
c1b55dcb46c2: Preparing
cf5b3c6798f7: Preparing
cf5b3c6798f7: Waiting
    
denied: requested access to the resource is denied

有人可以帮我解决这个问题吗？任何帮助，将不胜感激。
谢谢。

Answer 1

的默认存储库docker.io是hardcode：docker.io/library/

因此，对于 AWS ECR 存储库，您应该：

docker build -t test-repository .

docker tag test-repository:latest 536703334988.dkr.ecr.ap-southeast-2.amazonaws.com/test-repository:latest

docker push 536703334988.dkr.ecr.ap-southeast-2.amazonaws.com/test-repository:latest

确保test-repository已经在 ECR 上创建了 repo。