mirror of
https://github.com/bitnami/containers.git
synced 2026-02-12 23:27:17 +08:00
[bitnami/sealed-secrets-kubeseal] Release 0.24.4-debian-11-r0 (#53400)
Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
56
bitnami/sealed-secrets-kubeseal/0/debian-11/Dockerfile
Normal file
56
bitnami/sealed-secrets-kubeseal/0/debian-11/Dockerfile
Normal file
@@ -0,0 +1,56 @@
|
||||
# Copyright VMware, Inc.
|
||||
# SPDX-License-Identifier: APACHE-2.0
|
||||
|
||||
FROM docker.io/bitnami/minideb:bullseye as builder
|
||||
|
||||
ARG TARGETARCH
|
||||
|
||||
ENV OS_ARCH="${TARGETARCH:-amd64}"
|
||||
|
||||
COPY prebuildfs /
|
||||
SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
|
||||
|
||||
# Install required system packages and dependencies
|
||||
RUN install_packages ca-certificates curl
|
||||
RUN mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ ; \
|
||||
COMPONENTS=( \
|
||||
"sealed-secrets-kubeseal-0.24.4-0-linux-${OS_ARCH}-debian-11" \
|
||||
) ; \
|
||||
for COMPONENT in "${COMPONENTS[@]}"; do \
|
||||
if [ ! -f "${COMPONENT}.tar.gz" ]; then \
|
||||
curl -SsLf "https://downloads.bitnami.com/files/stacksmith/${COMPONENT}.tar.gz" -O ; \
|
||||
curl -SsLf "https://downloads.bitnami.com/files/stacksmith/${COMPONENT}.tar.gz.sha256" -O ; \
|
||||
fi ; \
|
||||
sha256sum -c "${COMPONENT}.tar.gz.sha256" ; \
|
||||
tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' ; \
|
||||
rm -rf "${COMPONENT}".tar.gz{,.sha256} ; \
|
||||
done
|
||||
|
||||
######
|
||||
|
||||
FROM scratch
|
||||
|
||||
ARG TARGETARCH
|
||||
|
||||
ENV OS_ARCH="${TARGETARCH:-amd64}"
|
||||
|
||||
LABEL com.vmware.cp.artifact.flavor="sha256:1e1b4657a77f0d47e9220f0c37b9bf7802581b93214fff7d1bd2364c8bf22e8e" \
|
||||
org.opencontainers.image.base.name="scratch" \
|
||||
org.opencontainers.image.created="2023-12-05T15:20:54Z" \
|
||||
org.opencontainers.image.description="Application packaged by VMware, Inc" \
|
||||
org.opencontainers.image.licenses="Apache-2.0" \
|
||||
org.opencontainers.image.ref.name="0.24.4-debian-11-r0" \
|
||||
org.opencontainers.image.title="sealed-secrets-kubeseal" \
|
||||
org.opencontainers.image.vendor="VMware, Inc." \
|
||||
org.opencontainers.image.version="0.24.4"
|
||||
|
||||
COPY prebuildfs /
|
||||
COPY rootfs /
|
||||
COPY --from=builder /opt/bitnami/sealed-secrets-kubeseal/bin/kubeseal /kubeseal
|
||||
|
||||
ENV APP_VERSION="0.24.4" \
|
||||
BITNAMI_APP_NAME="sealed-secrets-kubeseal"
|
||||
|
||||
USER 1001
|
||||
|
||||
ENTRYPOINT [ "/kubeseal" ]
|
||||
@@ -0,0 +1,7 @@
|
||||
# Copyright VMware, Inc.
|
||||
# SPDX-License-Identifier: APACHE-2.0
|
||||
|
||||
version: '2'
|
||||
services:
|
||||
kubeseal:
|
||||
image: docker.io/bitnami/sealed-secrets-kubeseal:0
|
||||
@@ -0,0 +1,8 @@
|
||||
{
|
||||
"sealed-secrets-kubeseal": {
|
||||
"arch": "amd64",
|
||||
"distro": "debian-11",
|
||||
"type": "NAMI",
|
||||
"version": "0.24.4-0"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,2 @@
|
||||
Bitnami containers ship with software bundles. You can find the licenses under:
|
||||
/opt/bitnami/[name-of-bundle]/licenses/[bundle-version].txt
|
||||
@@ -0,0 +1,27 @@
|
||||
#!/bin/sh
|
||||
# Copyright VMware, Inc.
|
||||
# SPDX-License-Identifier: APACHE-2.0
|
||||
set -eu
|
||||
|
||||
n=0
|
||||
max=2
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
until [ $n -gt $max ]; do
|
||||
set +e
|
||||
(
|
||||
apt-get update -qq &&
|
||||
apt-get install -y --no-install-recommends "$@"
|
||||
)
|
||||
CODE=$?
|
||||
set -e
|
||||
if [ $CODE -eq 0 ]; then
|
||||
break
|
||||
fi
|
||||
if [ $n -eq $max ]; then
|
||||
exit $CODE
|
||||
fi
|
||||
echo "apt failed, retrying"
|
||||
n=$(($n + 1))
|
||||
done
|
||||
apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
|
||||
24
bitnami/sealed-secrets-kubeseal/0/debian-11/prebuildfs/usr/sbin/run-script
Executable file
24
bitnami/sealed-secrets-kubeseal/0/debian-11/prebuildfs/usr/sbin/run-script
Executable file
@@ -0,0 +1,24 @@
|
||||
#!/bin/sh
|
||||
# Copyright VMware, Inc.
|
||||
# SPDX-License-Identifier: APACHE-2.0
|
||||
set -u
|
||||
|
||||
if [ $# -eq 0 ]; then
|
||||
>&2 echo "No arguments provided"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
script=$1
|
||||
exit_code="${2:-96}"
|
||||
fail_if_not_present="${3:-y}"
|
||||
|
||||
if test -f "$script"; then
|
||||
sh $script
|
||||
|
||||
if [ $? -ne 0 ]; then
|
||||
exit $((exit_code))
|
||||
fi
|
||||
elif [ "$fail_if_not_present" = "y" ]; then
|
||||
>&2 echo "script not found: $script"
|
||||
exit 127
|
||||
fi
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,5 @@
|
||||
rolling-tags:
|
||||
- "0"
|
||||
- 0-debian-11
|
||||
- 0.24.4
|
||||
- latest
|
||||
88
bitnami/sealed-secrets-kubeseal/README.md
Normal file
88
bitnami/sealed-secrets-kubeseal/README.md
Normal file
@@ -0,0 +1,88 @@
|
||||
# Bitnami package for Kubeseal (Sealed Secrets)
|
||||
|
||||
## What is Kubeseal (Sealed Secrets)?
|
||||
|
||||
> Kubeseal is a CLI utility that uses asymmetric cryptography to encrypt secrets that only the Sealed Secrets controller can decrypt.
|
||||
|
||||
[Overview of Kubeseal (Sealed Secrets)](https://github.com/bitnami-labs/sealed-secrets)
|
||||
|
||||
## TL;DR
|
||||
|
||||
```console
|
||||
docker run --name sealed-secrets-kubeseal bitnami/sealed-secrets-kubeseal:latest
|
||||
```
|
||||
|
||||
## Why use Bitnami Images?
|
||||
|
||||
* Bitnami closely tracks upstream source changes and promptly publishes new versions of this image using our automated systems.
|
||||
* With Bitnami images the latest bug fixes and features are available as soon as possible.
|
||||
* Bitnami containers, virtual machines and cloud images use the same components and configuration approach - making it easy to switch between formats based on your project needs.
|
||||
* All our images are based on [**minideb**](https://github.com/bitnami/minideb) -a minimalist Debian based container image that gives you a small base container image and the familiarity of a leading Linux distribution- or **scratch** -an explicitly empty image-.
|
||||
* All Bitnami images available in Docker Hub are signed with [Docker Content Trust (DCT)](https://docs.docker.com/engine/security/trust/content_trust/). You can use `DOCKER_CONTENT_TRUST=1` to verify the integrity of the images.
|
||||
* Bitnami container images are released on a regular basis with the latest distribution packages available.
|
||||
|
||||
Looking to use Kubeseal (Sealed Secrets) in production? Try [VMware Tanzu Application Catalog](https://bitnami.com/enterprise), the enterprise edition of Bitnami Application Catalog.
|
||||
|
||||
## Supported tags and respective `Dockerfile` links
|
||||
|
||||
Learn more about the Bitnami tagging policy and the difference between rolling tags and immutable tags [in our documentation page](https://docs.bitnami.com/tutorials/understand-rolling-tags-containers/).
|
||||
|
||||
You can see the equivalence between the different tags by taking a look at the `tags-info.yaml` file present in the branch folder, i.e `bitnami/ASSET/BRANCH/DISTRO/tags-info.yaml`.
|
||||
|
||||
Subscribe to project updates by watching the [bitnami/containers GitHub repo](https://github.com/bitnami/containers).
|
||||
|
||||
## Get this image
|
||||
|
||||
The recommended way to get the Bitnami Kubeseal (Sealed Secrets) Docker Image is to pull the prebuilt image from the [Docker Hub Registry](https://hub.docker.com/r/bitnami/sealed-secrets-kubeseal).
|
||||
|
||||
```console
|
||||
docker pull bitnami/sealed-secrets-kubeseal:latest
|
||||
```
|
||||
|
||||
To use a specific version, you can pull a versioned tag. You can view the [list of available versions](https://hub.docker.com/r/bitnami/sealed-secrets-kubeseal/tags/) in the Docker Hub Registry.
|
||||
|
||||
```console
|
||||
docker pull bitnami/sealed-secrets-kubeseal:[TAG]
|
||||
```
|
||||
|
||||
If you wish, you can also build the image yourself by cloning the repository, changing to the directory containing the Dockerfile and executing the `docker build` command. Remember to replace the `APP`, `VERSION` and `OPERATING-SYSTEM` path placeholders in the example command below with the correct values.
|
||||
|
||||
```console
|
||||
git clone https://github.com/bitnami/containers.git
|
||||
cd bitnami/APP/VERSION/OPERATING-SYSTEM
|
||||
docker build -t bitnami/APP:latest .
|
||||
```
|
||||
|
||||
## Configuration
|
||||
|
||||
### Running commands
|
||||
|
||||
To run commands inside this container you can use `docker run`, for example to execute `kubeseal --version` you can follow the example below:
|
||||
|
||||
```console
|
||||
docker run --rm --name sealed-secrets-kubeseal bitnami/sealed-secrets-kubeseal:latest -- kubeseal --version
|
||||
```
|
||||
|
||||
## Contributing
|
||||
|
||||
We'd love for you to contribute to this container. You can request new features by creating an [issue](https://github.com/bitnami/containers/issues) or submitting a [pull request](https://github.com/bitnami/containers/pulls) with your contribution.
|
||||
|
||||
## Issues
|
||||
|
||||
If you encountered a problem running this container, you can file an [issue](https://github.com/bitnami/containers/issues/new/choose). For us to provide better support, be sure to fill the issue template.
|
||||
|
||||
## License
|
||||
|
||||
Copyright © 2023 VMware, Inc.
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
<http://www.apache.org/licenses/LICENSE-2.0>
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
7
bitnami/sealed-secrets-kubeseal/docker-compose.yml
Normal file
7
bitnami/sealed-secrets-kubeseal/docker-compose.yml
Normal file
@@ -0,0 +1,7 @@
|
||||
# Copyright VMware, Inc.
|
||||
# SPDX-License-Identifier: APACHE-2.0
|
||||
|
||||
version: '2'
|
||||
services:
|
||||
kubeseal:
|
||||
image: docker.io/bitnami/sealed-secrets-kubeseal:0
|
||||
Reference in New Issue
Block a user