-
Story
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
False
-
False
-
ToDo
-
Spawned from #konveyor thread: https://kubernetes.slack.com/archives/CR85S82A2/p1637843649145400
Example scenario: migrate app from k8s to ocp:
When we input a docker file used to build app in k8s it might be using the custom container Image in Dockerfile (FROM node:alpine) and during translate phase we select Openshift as target cluster, so we expect the tool to change the image to redhat certified (FROM registry.access.redhat.com/ubi8/nodejs)
Will Container Images convert the images from k8s to OCP like :-
Building OCI-compliant container images
Running processes without root user access in container images
Building container images with the base image as Red Hat Enterprise Linux or a Universal Base Image
It's possible this could be split into a couple RFEs:
- Can we assist in the onboarding of dockerfiles / images into OCI compliance and using UBI?
- Distinct from the first, is there anything that we can do in a generic manner to onboard apps into using non-root? This is probably very application specific, I'm not sure that there is, but worth considering as I think it would be very useful.