Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-8735

use builder image to package up a scratch container for each plugin catalog image

XMLWordPrintable

    • RHDH COPE 3280, RHDH COPE 3281

      Chatting with Rogue today in thread, we've decided this approach might be best for getting an SBOM which includes nodejs issues but doesn't attempt to report 80 CVE JIRAs for 80 plugins if they all have the same RPM dependencies.

      FROM registry.stage.redhat.io/rhdh/plugin-catalog-builder-rhel9:1.8 as builder

# RHIDP-4220 - make Konflux preflight happy (don't run as root)
USER 1001

RUN do the plugin export 
# https://gitlab.cee.redhat.com/rhidp/rhdh-plugin-catalog/-/blob/rhdh-1-rhel-9/build/task/export-plugins.sh?ref_type=heads

FROM scratch
COPY --from=builder /path/to/plugin-to-include ./

      Depends on RHIDP-7998

      Once the above image is built containing the single plugin, we can then run https://gitlab.cee.redhat.com/rhidp/rhdh-plugin-catalog/-/blob/rhdh-1-rhel-9/build/task/publish-plugins.yaml?ref_type=heads#L60-91 to copy stuff to quay.

              nickboldt Nick Boldt
              nickboldt Nick Boldt
              RHIDP - Cope
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: