Bitnami/containers
2
0
Fork 0
mirror of https://github.com/bitnami/containers.git synced 2026-03-14 06:48:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

Deprecate Kaniko and KES (#82427)

Browse Source 
Signed-off-by: Carlos Rodríguez Hernández <carlos.rodriguez-hernandez@broadcom.com>
This commit is contained in:
Carlos Rodríguez Hernández
2025-06-16 13:07:20 +02:00
committed by GitHub
parent 34da4ac70b
commit 8d573b97ee
26 changed files with 0 additions and 8496 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
.vib/kaniko/goss/goss.yaml
View File

@@ -1,10 +0,0 @@
# Copyright Broadcom, Inc. All Rights Reserved.
# SPDX-License-Identifier: APACHE-2.0
gossfile:
# Goss tests exclusive to the current container
../../kaniko/goss/kaniko.yaml: {}
# Load scripts from .vib/common/goss/templates
../../common/goss/templates/check-app-version-no-shell-stdout.yaml: {}
../../common/goss/templates/check-ca-certs.yaml: {}
../../common/goss/templates/check-files.yaml: {}

17
.vib/kaniko/goss/kaniko.yaml
View File

@@ -1,17 +0,0 @@
command:
check-executor-help:
exec:
- /kaniko/executor
- --help
exit-status: 0
stdout:
- "Usage:"
- "executor [command]"
check-warmer-help:
exec:
- /kaniko/warmer
- --help
exit-status: 0
stdout:
- "Usage:"
- "cache warmer [flags]"

14
.vib/kaniko/goss/vars.yaml
View File

@@ -1,14 +0,0 @@
files:
- mode: "0644"
paths:
- /opt/bitnami/kaniko/.spdx-kaniko.spdx
- mode: "0755"
paths:
- /kaniko/docker-credential-acr-env
- /kaniko/docker-credential-ecr-login
- /kaniko/docker-credential-gcr
- /kaniko/executor
- /kaniko/warmer
version:
bin_name: /kaniko/executor
flag: version

73
.vib/kaniko/vib-verify.json
View File

@@ -1,73 +0,0 @@
{
"context": {
"resources": {
"url": "{SHA_ARCHIVE}",
"path": "{VIB_ENV_PATH}"
},
"runtime_parameters": "Y29tbWFuZDogWyIvc2hhcmVkL2J1c3lib3giLCAic2xlZXAiLCAiMzYwMCJdCg=="
},
"phases": {
"package": {
"actions": [
{
"action_id": "container-image-package",
"params": {
"application": {
"details": {
"name": "{VIB_ENV_CONTAINER}",
"tag": "{VIB_ENV_TAG}"
}
},
"architectures": [
"linux/amd64",
"linux/arm64"
]
}
},
{
"action_id": "container-image-lint",
"params": {
"threshold": "error"
}
}
]
},
"verify": {
"actions": [
{
"action_id": "goss",
"params": {
"resources": {
"path": "/.vib"
},
"tests_file": "kaniko/goss/goss.yaml",
"vars_file": "kaniko/goss/vars.yaml",
"remote": {
"pod": {
"workload": "deploy-kaniko"
}
}
}
},
{
"action_id": "trivy",
"params": {
"threshold": "LOW",
"vuln_type": [
"OS"
]
}
},
{
"action_id": "grype",
"params": {
"threshold": "CRITICAL",
"package_type": [
"OS"
]
}
}
]
}
}
}

9
.vib/kes/goss/goss.yaml
View File

@@ -1,9 +0,0 @@
# Copyright Broadcom, Inc. All Rights Reserved.
# SPDX-License-Identifier: APACHE-2.0
gossfile:
# Goss tests exclusive to the current container
../../kes/goss/kes.yaml: {}
# Load scripts from .vib/common/goss/templates
../../common/goss/templates/check-ca-certs.yaml: {}
../../common/goss/templates/check-files.yaml: {}

24
.vib/kes/goss/kes.yaml
View File

@@ -1,24 +0,0 @@
{{- /* We need to convert the version in semver to a valid date, as KES uses a date as the version */}}
{{- /* Step 1: Convert . to - */}}
{{- $version := .Env.APP_VERSION | replace "." "-" }}
{{- /* Step 2: Convert days to two digits */}}
{{- $version = regexReplaceAll "([0-9]+)-([0-9]+)-([0-9]$)" $version "$1-$2-0$3" }}
{{- /* Step 3: Convert month to two digits */}}
{{- $version = regexReplaceAll "([0-9]+)-([0-9])-([0-9]+)" $version "$1-0$2-$3" }}
command:
check-kes-version:
exec:
- kes
- --version
exit-status: 0
stdout:
# We need to add Version because using the variable alone converts it to a Date
# object, causing issues in the stdout matching
- /Version.*{{$version}}/
check-kes-help:
exec:
- kes
- --help
exit-status: 2
stderr:
- Start a KES server

7
.vib/kes/goss/vars.yaml
View File

@@ -1,7 +0,0 @@
files:
- mode: "0644"
paths:
- /opt/bitnami/kes/.spdx-kes.spdx
- mode: "0755"
paths:
- /kes

73
.vib/kes/vib-verify.json
View File

@@ -1,73 +0,0 @@
{
"context": {
"resources": {
"url": "{SHA_ARCHIVE}",
"path": "{VIB_ENV_PATH}"
},
"runtime_parameters": "Y29tbWFuZDogWyIvc2hhcmVkL2J1c3lib3giLCAic2xlZXAiLCAiMzYwMCJdCg=="
},
"phases": {
"package": {
"actions": [
{
"action_id": "container-image-package",
"params": {
"application": {
"details": {
"name": "{VIB_ENV_CONTAINER}",
"tag": "{VIB_ENV_TAG}"
}
},
"architectures": [
"linux/amd64",
"linux/arm64"
]
}
},
{
"action_id": "container-image-lint",
"params": {
"threshold": "error"
}
}
]
},
"verify": {
"actions": [
{
"action_id": "goss",
"params": {
"resources": {
"path": "/.vib"
},
"tests_file": "kes/goss/goss.yaml",
"vars_file": "kes/goss/vars.yaml",
"remote": {
"pod": {
"workload": "deploy-kes"
}
}
}
},
{
"action_id": "trivy",
"params": {
"threshold": "LOW",
"vuln_type": [
"OS"
]
}
},
{
"action_id": "grype",
"params": {
"threshold": "CRITICAL",
"package_type": [
"OS"
]
}
}
]
}
}
}