Skip to content

Security embargos

Luke Shumaker edited this page Jun 10, 2022 · 2 revisions

Making formerly embergoed things public

#!/bin/bash

set -e

copy() (
    local srcimage dstrepo dstimage
    srcimage=$1
    dstrepo=$2
    dstimage="$2:${1##*:}"
    if ! docker pull "$dstimage" &>/dev/null; then
        docker pull "$srcimage"
        docker tag "$srcimage" "$dstimage"
        docker push "$dstimage"
    fi
)

docker logout

keybase fs read /keybase/team/datawireio/secrets/dockerhub.d6edevautomaton.password | docker login --username="$(keybase fs read /keybase/team/datawireio/secrets/dockerhub.d6edevautomaton.username)" --password-stdin
copy quay.io/datawire-private/emissary:2.3.1-rc.2.0.20220609065844-2669e7b95d13                    docker.io/datawiredev/emissary
docker logout

keybase fs read /keybase/team/datawireio/secrets/dockerhub.webui.d6eautomaton.password | docker login --username="$(keybase fs read /keybase/team/datawireio/secrets/dockerhub.webui.d6eautomaton.username)" --password-stdin
copy quay.io/datawire-private/emissary:2.3.1-rc.3                                                  docker.io/emissaryingress/emissary
copy quay.io/datawire-private/base-envoy:envoy-0.8151e9a87cde33721a1b1f864d0c54ae72e4aa78.opt      docker.io/emissaryingress/base-envoy
copy quay.io/datawire-private/base-envoy:envoy-full-0.8151e9a87cde33721a1b1f864d0c54ae72e4aa78.opt docker.io/emissaryingress/base-envoy
docker logout

docker logout https://gcr.io/
keybase fs read /keybase/team/datawireio/secrets/googlecloud.gcr-ci-robot.datawire.json.key | gcloud auth activate-service-account --key-file=-
gcloud auth configure-docker
copy quay.io/datawire-private/base-envoy:envoy-0.8151e9a87cde33721a1b1f864d0c54ae72e4aa78.opt      gcr.io/datawire/ambassador-base
copy quay.io/datawire-private/base-envoy:envoy-full-0.8151e9a87cde33721a1b1f864d0c54ae72e4aa78.opt gcr.io/datawire/ambassador-base
docker logout https://gcr.io/