codebuild-new.tf

# To build the container, we need the following components:
# 1. An ECR repository to store the built image in.
# 2. A CodeBuild job to build and push the container. The build steps are defined in the buildspec.yml file.
# 3. An IAM policy that the build runs as with access to create images and push to ECR.
# 4. A webhook to receive notifications when commits are pushed to GitHub.

resource "aws_ecr_repository" "webinar_repo_new" {
  provider = aws.new
  name = "${var.container_name}"
}

data "template_file" "buildspec_new" {
  template = "${file("templates/buildspec.yml")}"

  vars = {
    container_name = "${var.container_name}"
    repository_url = "${aws_ecr_repository.webinar_repo_new.repository_url}"
    region         = "${var.aws_region_new}"
  }
}

resource "aws_codebuild_project" "build_image_new" {
  provider = aws.new

  name          = "${var.container_name}-docker-build"
  build_timeout = "60"

  service_role = "${aws_iam_role.codebuild_role.arn}"

  artifacts {
    type = "CODEPIPELINE"
  }

  environment {
    compute_type = "BUILD_GENERAL1_SMALL"
    image        = "aws/codebuild/standard:1.0"
    type         = "LINUX_CONTAINER"
    # This is needed to allow building container images.
    privileged_mode = true
  }

  source {
    type      = "CODEPIPELINE"
    buildspec = "${data.template_file.buildspec_new.rendered}"
  }
}