Merge pull request #678 from mozilla-iam/login-dockerhub

chore(codebuild): Login to dockerhub

buildspec.yml

@@ -17,7 +17,7 @@ phases:
       - echo "running for ${COMMIT_SHA} in ${DEPLOY_ENV}"
       - aws ecr get-login --region us-west-2 --no-include-email | bash
       - echo "Logging Into Docker Hub"
-      - echo $DOCKERHUB_PASSWORD | docker login --username $DOCKERHUB_USERNAME --password-stdin registry-1.docker.io 
+      - echo $DOCKERHUB_PASSWORD | docker login --username $DOCKERHUB_USERNAME --password-stdin
   build:
     commands:
       - if [ "$PR" = 1 ]; then myke docker; fi

terraform/codebuild/main.tf

@@ -32,14 +32,14 @@ resource "aws_codebuild_project" "build" {
 
     environment_variable {
       name  = "DOCKERHUB_USERNAME"
-      type  = "PARAMETER_STORE"
-      value = " /iam/dino-park-front-end/mozilla/DOCKERHUB_USERNAME"
+      type  = "SECRETS_MANAGER"
+      value = "/CodeBuild/dockerhub:username"
     }
 
     environment_variable {
       name  = "DOCKERHUB_PASSWORD"
-      type  = "PARAMETER_STORE"
-      value = "/iam/dino-park-front-end/mozilla/DOCKERHUB_PASSWORD"
+      type  = "SECRETS_MANAGER"
+      value = "/CodeBuild/dockerhub:password"
     }
   }
 
@@ -127,6 +127,15 @@ resource "aws_iam_role_policy" "codebuild" {
         "eks:DescribeCluster"
       ],
       "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Resource": [
+        "arn:aws:secretsmanager:*:*:secret:/CodeBuild/dockerhub*"
+      ],
+      "Action": [
+        "secretsmanager:GetSecretValue"
+      ]
     }
   ]
 }