ECR Docker image in Pipe.yml

Question

In their example
https://support.atlassian.com/bitbucket-cloud/docs/write-a-pipe-for-bitbucket-pipelines/

It shows a public pipe used in the pipe.yml file.

Our docker images are stored in our AWS ECR. What is the syntax for referencing the ECR image in the pipe.yml (access keys etc).

In a previous support ticket to use ecr they mentioned to use this

pipelines:  
  default:    
    - step:
        script:
          - eval $(aws ecr get-login --region ${AWS_DEFAULT_REGION} --no-include-email)                         
          - pipe: docker://ecrurl          
            variables:
              MY_VARIABLE: 'foo'
              MY_OTHER_VARIABLE: 'bar'

below. I'm wondering if this would work in the context of pipe.yml also.

Nathan Trevivian · Answer

Not ideal unless you want to be manually refreshing access keys every 90 days.

I'd rather use OIDC.

siddharthjoshi · Answer

Could you show an example of how to push an image to public ECR repository ? Is there any additional attributes which needs to be added along with the ones shown in the example ?

I am getting the following error

"The repository with name 'xxxxxxxx' does not exist in the registry with id 'xxxxxxxxx'"

P.S:  I do have a repository under public category in the AWS account, but not sure why it's unable to recognise that

Guillermo_akss3k · Answer

In my case, i resolved the issue using this code (Having configurated the AWS credentials in the pipeline variables) :

step:
name: Test pipe
script:
# AWS Credential
      - export AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY
      - export AWS_SECRET_ACCESS_KEY=$AWS_SECRET_KEY
      - export AWS_DEFAULT_REGION=$AWS_REGION
      - $(aws ecr get-login --no-include-email)
      - pipe: docker://<ecr_url>