remove signer from kaniko image
This commit is contained in:
parent
ffb7b685ce
commit
fb37a042f8
@ -19,27 +19,11 @@ spec:
|
|||||||
tty: true
|
tty: true
|
||||||
command:
|
command:
|
||||||
- /busybox/cat
|
- /busybox/cat
|
||||||
- name: alpine
|
|
||||||
imagePullPolicy: Always
|
|
||||||
image: ${repository}/library/alpine:latest
|
|
||||||
tty: true
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
""",
|
""",
|
||||||
) {
|
) {
|
||||||
node (label) {
|
node (label) {
|
||||||
def workspace = pwd()
|
def workspace = pwd()
|
||||||
|
|
||||||
stage ("Get CoSign") {
|
|
||||||
container ("alpine") {
|
|
||||||
sh """
|
|
||||||
apk add --no-cache curl jq
|
|
||||||
curl --silent --location "\$(curl --silent "https://api.github.com/repos/sigstore/cosign/releases/latest" | jq -r '.assets[0].browser_download_url')" --output "${workspace}/cosign"
|
|
||||||
chmod +x "${workspace}/cosign"
|
|
||||||
"""
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
stage ("Prepare Kaniko") {
|
stage ("Prepare Kaniko") {
|
||||||
container ("kaniko") {
|
container ("kaniko") {
|
||||||
withCredentials([usernameColonPassword(
|
withCredentials([usernameColonPassword(
|
||||||
@ -78,7 +62,6 @@ spec:
|
|||||||
stage("Build Alpine with CA") {
|
stage("Build Alpine with CA") {
|
||||||
container("kaniko") {
|
container("kaniko") {
|
||||||
def DF = """FROM gcr.io/kaniko-project/executor:debug
|
def DF = """FROM gcr.io/kaniko-project/executor:debug
|
||||||
COPY ./cosign /usr/local/bin/cosign
|
|
||||||
COPY ./kaniko-chain.crt /kaniko/ssl/certs/ca-certificates.crt
|
COPY ./kaniko-chain.crt /kaniko/ssl/certs/ca-certificates.crt
|
||||||
"""
|
"""
|
||||||
sh "cp /kaniko/ssl/certs/ca-certificates.crt \"${workspace}/kaniko-chain.crt\""
|
sh "cp /kaniko/ssl/certs/ca-certificates.crt \"${workspace}/kaniko-chain.crt\""
|
||||||
|
Reference in New Issue
Block a user