INTEGRATE

AWS CodeBuild

You can use the Phase CLI to effortlessly inject or expose secret inside your CI pipelines or jobs.

Prerequisites

Have signed up for the Phase Console and created an application.
PHASE_SERVICE_TOKEN.

If you are using a Self-Hosted instance of the Phase Console, you may supply PHASE_HOST environment variable with your URL (https://<HOST>).

For detailed cli install options, please see: Installation

Setting `PHASE_SERVICE_TOKEN`:

Go to the AWS Management Console.
Navigate to AWS Systems Manager > Parameter Store.
Click on Create Parameter.
Use PHASE_SERVICE_TOKEN as the name and provide its value. Remember the parameter type and KMS key if you use one.
In CodeBuild, grant permission to the service role to access this SSM parameter.

version: 0.2

phases:
  pre_build:
    commands:
      - curl -fsSL https://pkg.phase.dev/install.sh | bash
      - export $(phase secrets export --app "my application name" --env prod DOCKERHUB_USERNAME DOCKERHUB_TOKEN | xargs)
  build:
    commands:
      - docker login -u $DOCKERHUB_USERNAME -p $DOCKERHUB_TOKEN
      - docker build -t my-image .
      - docker push my-image:latest