Commit Graph

1610 Commits

Author SHA1 Message Date
priyawadhwa 588fd06564
Release 1.5.2 with signed kaniko images (#1608)
* Add cloudbuild job for signing releases

* Add cosign to github actions

* Update to 1.5.2 to release and sign images
2021-03-30 14:29:37 -07:00
Tejal Desai eda57e5400
release notes for v1.5.1 (#1589)
* release notes for v1.5.1

* release notes for v1.5.1
2021-02-22 22:31:40 -08:00
Tejal Desai ea96245f64
Add references to the bottom 2021-02-22 22:23:49 -08:00
Viktor Farcic 5e4fe2b9f2
docs: Added a video introduction to Kaniko (#1517)
* Video introduction

* Update README.md

Add new references section

Co-authored-by: Tejal Desai <tejal29@gmail.com>
2021-02-22 22:22:59 -08:00
Sascha Schwarze 69f942f751
Improve retry behavior for push operation (#1578)
* Update go-containerregistry to 0.4

* Implement --push-retry argument
2021-02-22 21:25:58 -08:00
Sascha Schwarze 2d4db8e0ec
Use up-to-date ca-certificates during build (#1580) 2021-02-22 21:25:00 -08:00
Tejal Desai adf5c7a810
Update CHANGELOG.md 2021-02-22 21:21:26 -08:00
Tejal Desai 2ef9c67bf4
Update CHANGELOG.md 2021-02-22 21:20:21 -08:00
Tejal Desai 4fb6a56b33
hopeful (#1582) 2021-02-16 16:33:25 -08:00
Tejal Desai b3223cc8f0
fix (#1581) 2021-02-16 15:58:54 -08:00
Max Wittig 09cac63b7b
docs(readme): add dockerfile flag documentation (#1566) 2021-02-08 09:59:41 -08:00
Tejal Desai fc93da2f26
Fix release pipeline (#1561)
* fix debug cloud build

* fix cloudbuild release

* add workflow

* fix release

* use push action

* Trigger Build

* Trigger Build

* Trigger Build

* Trigger Build

* Trigger Build

* add

* add parallel steps

* add parallel steps

* fix pathc

* fix dockerfile

* fix dockerfile

* add executor

* deploy

* test
2021-02-08 09:59:16 -08:00
Tejal Desai b540dd0df2
fix debug cloud build (#1560) 2021-01-28 11:19:35 -08:00
Sascha Schwarze 0ef53aa1d3
Optimize access to image manifests (#1555)
Introduce an in-memory cache for retrieved manifests in remote.go
2021-01-28 11:10:13 -08:00
Tejal Desai 28591e2ebb
release notes' (#1559) 2021-01-28 10:50:16 -08:00
Tejal Desai 9cd3a65900
fix busybox (#1557) 2021-01-28 10:45:04 -08:00
Tejal Desai ffd35dbe12
Mutli-arch support (#1531)
* initial commit

* remove bazel jobs

* fix arch

* more fixes after testing and code review comments

* fix build platform

* add individual cloudbuild.yaml as its taking 45 mins for a cloud build trigger

* add buildx plugin

* add more debugging

* update busybox version to fix CVE-2018-1000500

* fix

* lint + more debug

* fix

* fix

* fix

* remove images from cloudbiuld

* move CI job back to docker

* one more fix

* lets see

* bring it back

* move CI job back to docker

* remove aerg from top

* live restart config

* remove live restore as minikube setup failed

* add --force-systemd

* add --force-systemd and docker driver none

* change the --run flag

* docker info and some logs removed

* fix docker command

* upgrade version for buildx to 0.5.1

* remove docker service from travis.yml and add systemd cgroup config

* move the docker config up

* move them back to docker build

* fix

* fix all dockerfiles

* fix warmer

* fix

* rm bazel jobs

* add more logs

* fix debug

Co-authored-by: ankitm123 <ankitmohapatra123@gmail.com>
2021-01-25 17:49:19 -08:00
Theofilos Papapanagiotou 24fd3b2ab0
Fetch a github pull request (#1543) 2021-01-22 11:43:39 -08:00
Or Geva b3e036aab2
Add --image-name-tag-with-digest flag (#1541) 2021-01-19 13:28:05 -08:00
Josh Chorlton ece215c181
reject tarball writes with no destinations (#1534)
* reject tarball writes with no destinations

* Update pkg/snapshot/snapshot.go

Co-authored-by: Tejal Desai <tejal29@gmail.com>
2021-01-03 10:13:05 -08:00
Alec Rajeev 397912d96c
Fix travis-ci link (#1535) 2021-01-03 10:09:28 -08:00
ankitm123 c4e07e9185
fix: extract file as same user for warmer docker image (#1538)
Signed-off-by: ankitm123 <ankitmohapatra123@gmail.com>
2021-01-03 10:07:28 -08:00
ankitm123 4373ede9fa
fix: update busybox version to fix CVE-2018-1000500 (#1532)
Signed-off-by: ankitm123 <ankitmohapatra123@gmail.com>
2020-12-22 21:46:43 -08:00
Tejal Desai 86e361c20e
Update fs_util.go 2020-12-22 00:16:54 -08:00
Tejal Desai 9f76932171
Update GowalkDir dependency to pick up fixes. Added default 90 min timeout for walking FS. Override it with environment variable. Add slowjam to kaniko pod (#1530) 2020-12-21 22:40:37 -08:00
bahetiamit 6cffb679aa
Adding multiarch image support (#1474) 2020-12-21 10:11:13 -08:00
Matt Moore 1ad4295462
Update ggcr to pick up estargz and caching option (#1527) 2020-12-21 10:09:21 -08:00
Tejal Desai b04399eeac
add caching copy layers back (#1518)
* add caching copy layers back

* fix test

* lint

* fix test - 2

* Add integration test

* fix lint
2020-12-11 00:25:03 -08:00
Vincent Behar dde98a8e73
feat(warmer): Warmer now supports all registry-related flags (#1499)
which means we can now:
- set up one or more mirrors
- set up registries certificates
- skip TLS verify
- use plain HTTP
using the same set of flags that are defined for the executor
2020-12-10 22:55:43 -08:00
Fabrice 454910f613
feat: Add https tar.gz remote source for context (#1519)
* feat: Add https tar.gz remote source for context

* Add license header

* add license header

Co-authored-by: Tejal Desai <tejal29@gmail.com>
2020-12-10 22:55:02 -08:00
Severin Strobl c2a919a801
Switch to runtime detection via bpfd/proc (#1502)
The upstream of github.com/genuinetools/amicontained switched to the
container runtime detection via github.com/genuinetools/bpfd/proc,
which supports a larger range of container runtimes. With this change
(among others) Podman can be detected correctly.

Fixes #1501.
2020-12-09 11:44:31 -08:00
Lars c982956c15
Fix typo in error message (#1494) 2020-12-08 16:18:11 -08:00
Vincent Behar 131828a1ad
feat: support multiple registry mirrors with fallback (#1498)
Fixes #1473

The initial implementation of the registry mirror only allowed a single mirror, and if pulling from the mirror failed, the build would fail.

This change introduces:
- multiple registry mirrors instead of a single one
- fallback if an image can't be pulled from a registry

This is the same behavior as the docker daemon and will allow using a registry mirror such as `mirror.gcr.io` which is incomplete and doesn't have all the content that the default registry on docker.io has.

Note that there are no changes in the CLI flags, the `--registry-mirror` flag is still valid. But now it can be used multiple times to set up more than one registry mirror.

Co-authored-by: Tejal Desai <tejaldesai@google.com>
2020-12-08 16:16:25 -08:00
Lars Toenning 5fad5f360f
Document flags for tarball build only (#1503) 2020-12-08 16:13:53 -08:00
Sladyn 0c1a1a690a
Fix COPY with --chown command (#1477)
* Fix COPY with --chown command

* fix linters
2020-12-08 16:12:04 -08:00
Lars bdcdec7c93
Remove unused code (#1495) 2020-12-08 16:11:42 -08:00
mickkael 275cc9a7e7
Add option customPlatform (#1500)
* Add option customPlatform

* fix formatting

* fix No newline at end of file
2020-12-08 16:11:18 -08:00
Tejal Desai ea59504b9b
Update pull_request_template.md 2020-12-08 16:10:34 -08:00
zhouhaibing089 83424ba1a1
doc: clarify the format of --registry-mirror (#1504)
In the context of Docker Hub ratelimit, registry mirror has been applied
more and more. It's very unfortunate that kaniko doesn't take the same
form as docker/containerd. The registry mirror shouldn't have scheme
like `https://` included. This is not explicitly described in the doc.
2020-12-08 16:04:19 -08:00
Shashank 9ed158c1f6
Fixes #1469 : Remove file that matches with the directory path (#1478)
* Fixes #1469 : Remove file that matches with the directory path

* Fixes #1469 : Remove file that matches with the directory path

* Fixes #1469 : Fix lint errors

* Fixes #1469 : Fix lint errors

* Fixes #1469 : Fix lint errors

* Fixes #1469 : Reduce conditional depth

* Fixes #1469 : Remove an additional line

Co-authored-by: anugu-chegg <anugu.s@chegg.com>
2020-11-05 08:48:55 -08:00
Tejal Desai bd5a08baf1
add section to run lints (#1480)
* add section to run lints

* Update DEVELOPMENT.md
2020-11-04 14:17:48 -08:00
Yulia Gaponenko 49e7d8a8cd
Add s390x kaniko build to multi-arch list (#1475)
This is extenion of current code to build s390x version of kaniko
executor image and add it to multi-arch manifest

Signed-off-by: Yulia Gaponenko <yulia.gaponenko1@de.ibm.com>
2020-11-04 14:03:16 -08:00
Tejal Desai bbd06c48bd
Add docs for GKE workload identity. (#1476)
* Add docs for GKE workload identity.

* Add instructions to use kaniko pod with Workload identity

* grammar fix
2020-11-02 23:21:40 -08:00
ejose19 2f8d939b3f
fix: CheckPushPermissions not being called when CacheRepo was set (#1471) 2020-10-29 23:46:00 -07:00
Tejal Desai 5afb142c69
release v1.13.0 (#1470) 2020-10-29 10:13:16 -07:00
Chris Mellard 1d12985648
feat: Added in docker cred helper for Azure Container Registry sourcing auth tokens directly from environment to debug image (#1458) 2020-10-28 14:01:59 -07:00
Sladyn be3f9c23a6
Fix docker build tag (#1460)
* Fix docker build tag

* Retain previous command
2020-10-22 14:42:14 -07:00
Chris Mellard b106aa9a1b
feat: Added in docker cred helper for Azure Container Registry sourcing auth tokens directly from environment (#1453) 2020-10-16 13:51:13 -07:00
Matt Moore a310cc6d1c
Add multi-arch image via Bazel (#1452)
* Add multi-arch image via Bazel

* Drop the commented  tags

* Move tests to //integration
2020-10-09 13:02:09 -07:00
Tinjo Schöni 5f4e2f1366
Fix .dockerignore for build context copies in later stages (#1447)
* Extend .dockerignore integration test with copies in later stages

.dockerignore should continue to apply when copying from the build context in later stages, but it currently doesn't

* Replace excluded global with passed along FileContext struct

This new FileContext struct allows much cleaner handling of context specific file exclusions.
The global excluded file state is no longer needed.

Additionally this also fixes the issue where excluded files aren't being applied for build context copies in later build stages.
2020-10-08 12:47:14 -07:00