100 lines
3.1 KiB
Groovy
100 lines
3.1 KiB
Groovy
#!groovy
|
|
|
|
def repository = "registry.c.test-chamber-13.lan"
|
|
def repositoryCreds = "harbor-repository-creds"
|
|
|
|
def dockerFile = """
|
|
# Certificate Container
|
|
FROM registry.c.test-chamber-13.lan/library/alpine:latest as certHost
|
|
|
|
# Build Container
|
|
FROM registry.c.test-chamber-13.lan/dockerhub/library/golang:alpine AS build
|
|
|
|
COPY generic-sidecar-injector/ /go/src/app/
|
|
|
|
WORKDIR /go/src/app
|
|
|
|
RUN set -x && \\
|
|
apk add --no-cache git upx gcc musl-dev && \\
|
|
addgroup -S -g 1000 app && \\
|
|
adduser --disabled-password -G app --gecos "application account" --home "/home/app" --shell "/sbin/nologin" --no-create-home --uid 1000 app && \\
|
|
go mod download && \\
|
|
GIT_HASH="\$(git rev-parse --short HEAD)" && \\
|
|
GIT_TAG="\$(git tag | tail -1)" && \\
|
|
CGO_ENABLED="0" && \\
|
|
GOOS="linux" && \\
|
|
GOARCH="amd64" && \\
|
|
go build \\
|
|
-v \\
|
|
-tags timetzdata \\
|
|
-a \\
|
|
-ldflags="-s -w -X 'github.com/salesforce/generic-sidecar-injector/pkg/metrics.gitHash=\${GIT_HASH}' -X 'github.com/salesforce/generic-sidecar-injector/pkg/metrics.gitTag=\${GIT_TAG}' -linkmode external -extldflags '-static'" \\
|
|
-installsuffix cgo \\
|
|
-o sidecarinjector \\
|
|
./cmd/sidecarinjector && \\
|
|
upx --lzma sidecarinjector
|
|
|
|
# Build Image from Scratch
|
|
FROM registry.c.test-chamber-13.lan/library/alpine:latest
|
|
|
|
LABEL maintainer="The_Spider <spider@smoothnet.org>"
|
|
|
|
COPY --from=certHost /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
|
|
COPY --from=build /etc/passwd /etc/group /etc/
|
|
COPY --from=build --chown=app:app /go/src/app/sidecarinjector /app/sidecarinjector
|
|
|
|
USER app:app
|
|
WORKDIR /app/
|
|
|
|
ENTRYPOINT ["/app/sidecarinjector"]
|
|
"""
|
|
|
|
def label = "kubernetes-${UUID.randomUUID().toString()}"
|
|
def templateName = "pipeline-worker"
|
|
podTemplate(
|
|
label: label,
|
|
name: templateName,
|
|
yaml: functions.podYaml(
|
|
repo: repository,
|
|
templateName: templateName,
|
|
kaniko: true
|
|
)
|
|
) {
|
|
node (label) {
|
|
stage ("Pull generic-sidecar-injector source") {
|
|
dir("generic-sidecar-injector") {
|
|
checkout ([
|
|
$class: "GitSCM",
|
|
branches: [
|
|
[
|
|
name: "refs/heads/master",
|
|
],
|
|
],
|
|
userRemoteConfigs: [
|
|
[
|
|
url: "https://github.com/salesforce/generic-sidecar-injector.git",
|
|
],
|
|
],
|
|
extensions: [
|
|
[
|
|
$class: "CloneOption",
|
|
shallow: true,
|
|
],
|
|
[
|
|
$class: "CheckoutOption",
|
|
timeout: 2,
|
|
],
|
|
],
|
|
])
|
|
}
|
|
}
|
|
|
|
functions.buildContainer(
|
|
repository: repository,
|
|
imageDest: "${repository}/library/generic-sidecar-injector:latest",
|
|
dockerFile: dockerFile,
|
|
repoCreds: repositoryCreds,
|
|
)
|
|
}
|
|
}
|