From 054533f574ec45668d0c0c23a626e8887cdeeba8 Mon Sep 17 00:00:00 2001
From: Haitao Pan <manbuzhe2009@qq.com>
Date: Tue, 5 Mar 2024 23:42:15 +0800
Subject: [PATCH] add setup-kaniko-auth.sh

---
 oci/base/alpine-image-builder/Dockerfile      |  4 ++-
 .../alpine-image-builder/setup-kaniko-auth.sh | 25 +++++++++++++++++++
 2 files changed, 28 insertions(+), 1 deletion(-)
 create mode 100644 oci/base/alpine-image-builder/setup-kaniko-auth.sh

diff --git a/oci/base/alpine-image-builder/Dockerfile b/oci/base/alpine-image-builder/Dockerfile
index 579796a..f0e968b 100644
--- a/oci/base/alpine-image-builder/Dockerfile
+++ b/oci/base/alpine-image-builder/Dockerfile
@@ -13,7 +13,9 @@ FROM alpine:latest AS prod
 
 WORKDIR /src/
 
-RUN apk --no-cache add ca-certificates git && mkdir -pv /kaniko/
 COPY --from=builder /src/go/bin/executor /kaniko/
+COPY setup-kaniko-auth.sh /kaniko/setup-kaniko-auth.sh
+RUN  apk --no-cache add ca-certificates git && \
+     chmod +x /kaniko/setup-kaniko-auth.sh
 
 ENTRYPOINT ["/bin/sh"]
diff --git a/oci/base/alpine-image-builder/setup-kaniko-auth.sh b/oci/base/alpine-image-builder/setup-kaniko-auth.sh
new file mode 100644
index 0000000..cfbf42c
--- /dev/null
+++ b/oci/base/alpine-image-builder/setup-kaniko-auth.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+REGISTRY_ADDR=$1
+REGISTRY_REPO_USER=$2
+REGISTRY_REPO_PASSWORD=$3
+DEBUG=${4:-false}
+
+check_non_empty() {
+    if [ -z "$1" ]; then
+        echo "Error: $2 must be provided."
+        exit 1
+    fi
+}
+
+check_non_empty "$REGISTRY_ADDR" "Registry address"
+check_non_empty "$REGISTRY_REPO_USER" "Registry username"
+check_non_empty "$REGISTRY_REPO_PASSWORD" "Registry password"
+
+mkdir -p /kaniko/.docker
+AUTH=$(echo -n "${REGISTRY_REPO_USER}:${REGISTRY_REPO_PASSWORD}" | base64)
+echo "{\"auths\":{\"https://${REGISTRY_ADDR}/v1/\":{\"auth\":\"${AUTH}\"}}}" > /kaniko/.docker/config.json
+
+if [ "$DEBUG" = "true" ]; then
+    cat /kaniko/.docker/config.json
+fi