From 3e17196599a093e35128bdd592c8ef0d8eac5a1e Mon Sep 17 00:00:00 2001
From: Alex Monk <alex.monk@digital.cabinet-office.gov.uk>
Date: Mon, 23 Nov 2020 18:03:06 +0000
Subject: [PATCH] Authenticate to DockerHub when building canary image

So we don't get caught in rate limiting issues when trying to pull a FROM image

Based on this hack courtesy of Andy Paine: https://github.com/vito/oci-build-task/issues/14#issuecomment-596731775
---
 .../cd-smoke-test-pipeline.yaml                     | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/charts/gsp-cluster/templates/04-main-team-pipelines/cd-smoke-test-pipeline.yaml b/charts/gsp-cluster/templates/04-main-team-pipelines/cd-smoke-test-pipeline.yaml
index dfdb080b2..717c61b3a 100644
--- a/charts/gsp-cluster/templates/04-main-team-pipelines/cd-smoke-test-pipeline.yaml
+++ b/charts/gsp-cluster/templates/04-main-team-pipelines/cd-smoke-test-pipeline.yaml
@@ -75,14 +75,21 @@ spec:
               repository: vito/oci-build-task
               username: ((dockerhubpull-concourse.username))
               password: ((dockerhubpull-concourse.password))
-          params:
-            CONTEXT: src/components/canary
           inputs:
           - name: src
           outputs:
           - name: image
           run:
-            path: build
+            path: ash
+            args:
+            - -c
+            - |
+              AUTH="$(echo -n '((dockerhubpull-concourse.username)):((dockerhubpull-concourse.password))' | base64)"
+              mkdir docker_creds
+              cat > docker_creds/config.json <<EOF
+              { "auths": { "https://index.docker.io/v1/": { "auth": "$AUTH" }}}
+              EOF
+              CONTEXT=src/components/canary DOCKER_CONFIG=docker_creds build
       - put: ecr
         params:
           image: image/image.tar