mirror of
https://github.com/kubevela/kubevela.git
synced 2026-05-08 02:16:56 +00:00
52f9b7e691
* Fix: upgrade package github.com/docker/cli for CVE-2021-41092 Signed-off-by: barnettZQG <barnett.zqg@gmail.com> (cherry picked from commitc0ce5b9931) * Chore: change go version to 1.17 Signed-off-by: barnettZQG <barnett.zqg@gmail.com> (cherry picked from commit976d781dc2) * Chore: change go mod Signed-off-by: barnettZQG <barnett.zqg@gmail.com> (cherry picked from commit01724c9bf5) * Fix: change install cue shell Signed-off-by: barnettZQG <barnett.zqg@gmail.com> (cherry picked from commit3bab8d57fa) Co-authored-by: barnettZQG <barnett.zqg@gmail.com>
45 lines
1.5 KiB
Docker
45 lines
1.5 KiB
Docker
# Build the manager binary
|
|
FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.17-alpine as builder
|
|
|
|
WORKDIR /workspace
|
|
# Copy the Go Modules manifests
|
|
COPY ../../go.mod go.mod
|
|
COPY ../../go.sum go.sum
|
|
# cache deps before building and copying source so that we don't need to re-download as much
|
|
# and so that source changes don't invalidate our downloaded layer
|
|
RUN go mod download
|
|
|
|
# Copy the go source
|
|
COPY ../../runtime/rollout/cmd/main.go main.go
|
|
COPY ../../apis apis/
|
|
COPY ../../pkg pkg/
|
|
COPY ../../version version/
|
|
|
|
# Build
|
|
ARG TARGETARCH
|
|
ARG VERSION
|
|
ARG GITVERSION
|
|
RUN GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} \
|
|
go build -a -ldflags "-s -w -X github.com/oam-dev/kubevela/version.VelaVersion=${VERSION:-undefined} -X github.com/oam-dev/kubevela/version.GitRevision=${GITVERSION:-undefined}" \
|
|
-o manager-${TARGETARCH} main.go
|
|
|
|
# Use alpine as base image due to the discussion in issue #1448
|
|
# You can replace distroless as minimal base image to package the manager binary
|
|
# Refer to https://github.com/GoogleContainerTools/distroless for more details
|
|
# Overwrite `BASE_IMAGE` by passing `--build-arg=BASE_IMAGE=gcr.io/distroless/static:nonroot`
|
|
ARG BASE_IMAGE
|
|
FROM ${BASE_IMAGE:-alpine:latest}
|
|
# This is required by daemon connnecting with cri
|
|
RUN apk add --no-cache ca-certificates bash
|
|
|
|
WORKDIR /
|
|
|
|
ARG TARGETARCH
|
|
COPY --from=builder /workspace/manager-${TARGETARCH} /usr/local/bin/manager
|
|
|
|
COPY ../../entrypoint.sh /usr/local/bin/
|
|
|
|
ENTRYPOINT ["entrypoint.sh"]
|
|
|
|
CMD ["manager"]
|