home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-10 21:56:02 +10:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2720 from munnerz/release-0.14-fixup-root-user

Browse Source 
Cherrypick: fix up UID mapping in release-0.14
This commit is contained in:
jetstack-bot
2020-03-20 12:29:18 +00:00
committed by GitHub
parent 6da95758a4 ae186a9f1d
commit 9a1a060ea0
13 changed files with 34 additions and 151 deletions
Download Patch File Download Diff File Expand all files Collapse all files
BUILD.bazel
+6 -4
View File
@@ -25,16 +25,18 @@ genrule(
container_bundle(
name = "images",
images = {
"{STABLE_DOCKER_REGISTRY}/cert-manager-controller:{STABLE_DOCKER_TAG}": "//cmd/controller:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-acmesolver:{STABLE_DOCKER_TAG}": "//cmd/acmesolver:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-webhook:{STABLE_DOCKER_TAG}": "//cmd/webhook:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-cainjector:{STABLE_DOCKER_TAG}": "//cmd/cainjector:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-controller:{STABLE_DOCKER_TAG}": "//build:controller.image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-acmesolver:{STABLE_DOCKER_TAG}": "//build:acmesolver.image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-webhook:{STABLE_DOCKER_TAG}": "//build:webhook.image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-cainjector:{STABLE_DOCKER_TAG}": "//build:cainjector.image",
},
tags = ["manual"],
)
docker_push(
name = "images.push",
bundle = ":images",
tags = ["manual"],
)
filegroup(
build/BUILD.bazel
+1
View File
@@ -44,6 +44,7 @@ DOCKERIZED_BINARIES = {
"/usr/local/bin/" + binary: "/usr/bin/" + binary,
},
tags = ["manual"],
user = "1000",
visibility = ["//visibility:private"],
) for binary, meta in DOCKERIZED_BINARIES.items()]
build/container.bzl
+4 -4
View File
@@ -66,18 +66,18 @@ def multi_arch_container(
)
container_image(
name = "%s-internal" % name,
name = "%s.image" % name,
base = ":%s-internal-notimestamp" % name,
stamp = stamp,
tags = tags,
visibility = ["//visibility:private"],
visibility = ["//visibility:public"],
)
for arch in architectures:
container_bundle(
name = "%s-%s" % (name, arch),
images = {
docker_tag.format(ARCH = arch): ":%s-internal" % name
docker_tag.format(ARCH = arch): ":%s.image" % name
for docker_tag in docker_tags
},
tags = tags,
@@ -107,7 +107,7 @@ def multi_arch_container(
multi_arch_container_push(
name = name,
architectures = architectures,
docker_tags_images = {docker_push_tag: ":%s-internal" % name for docker_push_tag in docker_push_tags},
docker_tags_images = {docker_push_tag: ":%s.image" % name for docker_push_tag in docker_push_tags},
tags = tags,
)
cmd/acmesolver/BUILD.bazel
-14
View File
@@ -1,20 +1,6 @@
load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
load("//hack/build:docker.bzl", "covered_image", "image")
load("//build:version.bzl", "version_x_defs")
image(
name = "image",
binary = ":acmesolver",
component = "acmesolver",
visibility = ["//visibility:public"],
)
covered_image(
name = "image.covered",
component = "acmesolver",
visibility = ["//visibility:public"],
)
go_library(
name = "go_default_library",
srcs = ["main.go"],
cmd/cainjector/BUILD.bazel
-14
View File
@@ -1,20 +1,6 @@
load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
load("//hack/build:docker.bzl", "covered_image", "image")
load("//build:version.bzl", "version_x_defs")
image(
name = "image",
binary = ":cainjector",
component = "cainjector",
visibility = ["//visibility:public"],
)
covered_image(
name = "image.covered",
component = "cainjector",
visibility = ["//visibility:public"],
)
go_library(
name = "go_default_library",
srcs = [
cmd/controller/BUILD.bazel
-14
View File
@@ -1,20 +1,6 @@
load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
load("//hack/build:docker.bzl", "covered_image", "image")
load("//build:version.bzl", "version_x_defs")
image(
name = "image",
binary = ":controller",
component = "controller",
visibility = ["//visibility:public"],
)
covered_image(
name = "image.covered",
component = "controller",
visibility = ["//visibility:public"],
)
go_library(
name = "go_default_library",
srcs = [
cmd/webhook/BUILD.bazel
-14
View File
@@ -1,20 +1,6 @@
load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
load("//hack/build:docker.bzl", "covered_image", "image")
load("//build:version.bzl", "version_x_defs")
image(
name = "image",
binary = ":webhook",
component = "webhook",
visibility = ["//visibility:public"],
)
covered_image(
name = "image.covered",
component = "webhook",
visibility = ["//visibility:public"],
)
go_library(
name = "go_default_library",
srcs = ["main.go"],
devel/addon/certmanager/BUILD.bazel
+4 -4
View File
@@ -3,10 +3,10 @@ load("@io_bazel_rules_docker//container:bundle.bzl", "container_bundle")
container_bundle(
name = "bundle",
images = {
"{STABLE_DOCKER_REGISTRY}/cert-manager-controller:{STABLE_DOCKER_TAG}": "//cmd/controller:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-acmesolver:{STABLE_DOCKER_TAG}": "//cmd/acmesolver:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-webhook:{STABLE_DOCKER_TAG}": "//cmd/webhook:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-cainjector:{STABLE_DOCKER_TAG}": "//cmd/cainjector:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-controller:{STABLE_DOCKER_TAG}": "//build:controller.image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-acmesolver:{STABLE_DOCKER_TAG}": "//build:acmesolver.image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-webhook:{STABLE_DOCKER_TAG}": "//build:webhook.image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-cainjector:{STABLE_DOCKER_TAG}": "//build:cainjector.image",
},
tags = ["manual"],
)
devel/addon/pebble/BUILD.bazel
+1
View File
@@ -16,6 +16,7 @@ go_image(
name = "image",
base = "@static_base//image",
binary = ":app",
tags = ["manual"],
visibility = ["//visibility:public"],
)
devel/addon/samplewebhook/sample/BUILD.bazel
+1
View File
@@ -5,6 +5,7 @@ go_image(
name = "image",
base = "@static_base//image",
binary = ":sample",
tags = ["manual"],
visibility = ["//visibility:public"],
)
hack/build/docker.bzl
+17 -35
View File
@@ -17,38 +17,6 @@ load("@io_bazel_rules_docker//container:bundle.bzl", "container_bundle")
load("@io_bazel_rules_docker//go:image.bzl", "go_image")
load("@io_bazel_rules_go//go:def.bzl", "go_test")
def image(
name,
component,
binary,
user = "1000",
stamp = True,
testonly = False,
**kwargs):
go_image(
name = "%s.app" % name,
base = "@static_base//image",
binary = binary,
testonly = testonly,
)
container_image(
name = name,
base = "%s.app" % name,
user = user,
stamp = stamp,
testonly = testonly,
**kwargs)
container_bundle(
name = name + ".export",
images = {
component + ":{STABLE_APP_GIT_COMMIT}": ":" + name,
},
testonly = testonly,
)
def covered_image(name, component, **kwargs):
native.genrule(
name = "%s.covered-testfile" % name,
@@ -84,9 +52,23 @@ EOF
tags = ["manual"],
)
image(
name = name,
go_image(
name = "%s.covered-image" % name,
base = "@static_base//image",
binary = "%s.covered-app" % name,
testonly = True,
component = component,
)
container_image(
name = name,
base = "%s.covered-image" % name,
testonly = True,
**kwargs)
container_bundle(
name = name + ".export",
images = {
component + ":{STABLE_APP_GIT_COMMIT}": ":" + name,
},
testonly = True,
)
test/e2e/BUILD.bazel
-20
View File
@@ -1,23 +1,4 @@
load("@io_bazel_rules_go//go:def.bzl", "go_library", "go_test")
load("@io_bazel_rules_docker//container:bundle.bzl", "container_bundle")
container_bundle(
name = "images",
images = {
# A set of images to bundle up into a single tarball.
"pebble:bazel": "//test/e2e/charts/pebble:image",
"quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.26.1": "@io_kubernetes_ingress-nginx//image",
"k8s.gcr.io/defaultbackend-amd64:bazel": "@io_gcr_k8s_defaultbackend//image",
"vault:bazel": "@com_hashicorp_vault//image",
"sample-webhook:bazel": "//test/e2e/framework/addon/samplewebhook/sample:image",
"gcr.io/kubernetes-helm/tiller:bazel": "@io_gcr_helm_tiller//image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-controller:{STABLE_DOCKER_TAG}": "//cmd/controller:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-acmesolver:{STABLE_DOCKER_TAG}": "//cmd/acmesolver:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-webhook:{STABLE_DOCKER_TAG}": "//cmd/webhook:image",
"{STABLE_DOCKER_REGISTRY}/cert-manager-cainjector:{STABLE_DOCKER_TAG}": "//cmd/cainjector:image",
},
tags = ["manual"],
)
# we add this rule so users can `bazel build //test/e2e` to run a
# platform-independent version of the e2e test binary
@@ -73,7 +54,6 @@ filegroup(
srcs = [
":package-srcs",
"//test/e2e/bin/cloudflare-clean:all-srcs",
"//test/e2e/charts:all-srcs",
"//test/e2e/framework:all-srcs",
"//test/e2e/suite:all-srcs",
"//test/e2e/util:all-srcs",
test/e2e/charts/BUILD.bazel
-28
View File
@@ -1,28 +0,0 @@
load("@io_bazel_rules_docker//container:bundle.bzl", "container_bundle")
container_bundle(
name = "images",
images = {
# A set of images to bundle up into a single tarball.
"pebble:bazel": "//test/e2e/charts/pebble:image",
"quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.26.1": "@io_kubernetes_ingress-nginx//image",
"k8s.gcr.io/defaultbackend-amd64:bazel": "@io_gcr_k8s_defaultbackend//image",
"vault:bazel": "@com_hashicorp_vault//image",
"gcr.io/kubernetes-helm/tiller:bazel": "@io_gcr_helm_tiller//image",
},
tags = ["manual"],
)
filegroup(
name = "package-srcs",
srcs = glob(["**"]),
tags = ["automanaged"],
visibility = ["//visibility:private"],
)
filegroup(
name = "all-srcs",
srcs = [":package-srcs"],
tags = ["automanaged"],
visibility = ["//visibility:public"],
)