ismail yenigul ismailyenigul

Keybase proof

I hereby claim:

I am ismailyenigul on github.
I am ismailyenigul (https://keybase.io/ismailyenigul) on keybase.
I have a public key ASCZFkmkSBZ0ztbsZgwq4zcLxuWFQRxi5bKRiKBXzVsTxQo

To claim this, I am signing this object:

Cloudtrail Changes

{ ($.eventName = CreateTrail) || ($.eventName = UpdateTrail) || ($.eventName = DeleteTrail) || ($.eventName = StartLogging) || ($.eventName = StopLogging) }

AWS Config Change

Updated version of the groovy script at https://kublr.com/blog/advanced-jenkins-groovy-scripting-for-live-fetching-of-docker-images/ to use describe-images to sort AWS ECR images by date.

Don't forget to update MYREPO with your repo name and aws region! Assumption:

Your Jenkins instance has right IAM role to access AWS ECR.
Installed Active Choice Parameter or Extended Choice Parameter Plug-In
Installed awscli on Jenkins instance

I used the following code block to add Tags into Cloudformation yaml file.

 %{~ if length(mytags) >0 ~}
      Tags:
     %{~ endif ~}
    %{~ for tag_key, tag_value in mytags ~}
        - Key: "${tag_key}"
          Value: "${tag_value}"
    %{~ endfor ~}

pipeline {
  agent any
     environment {
        AWS_REGION  = 'eu-west-1'
        GITCOMMIT="${env.GIT_COMMIT}"


    }
 //  options {

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "logs:List*",

This gist contains sample policy I used in my article at https://ismailyenigul.medium.com/how-to-setup-multi-aws-accounts-assume-role-with-aws-cli-45ae869661ed For admin access from security to other accounts. save as admin-external-accounts.json

{
        "Version": "2012-10-17",
        "Statement": [
          {
            "Sid": "",
            "Effect": "Allow",

	traefik2 label for the container running service different than port 80 (ie 8080)

	container_name: webserver
	restart: always
	labels:
	- traefik.http.routers.websrv.rule=Host(`cloud.mydomain.com`)
	- traefik.http.services.websrv.loadbalancer.server.port=8080

	pipeline {
	environment {
	imagename = "yenigul/hacicenkins"
	registryCredential = 'yenigul-dockerhub'
	dockerImage = ''
	}
	agent any
	stages {
	stage('Cloning Git') {
	steps {

	pipeline {
	environment {
	imagename = "ismailtest"
	ecrurl = "https://828556645578.dkr.ecr.us-east-2.amazonaws.com"
	ecrcredentials = "ecr:us-east-2:ecr-ismail"
	dockerImage = ''
	}
	agent any
	stages {
	stage('Cloning Git') {