update

.github/workflows/alpine-image.yaml

@@ -0,0 +1,28 @@
+name: Build & push apline image
+on:
+  pull_request:
+  push:
+    paths:
+      - '.github/workflows/alpine-image.yaml'
+      - 'dockerfiles/alpine-with-ca.Dockerfile'
+    branches:
+      - main
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    name: Build docker image
+    steps:
+      - uses: actions/checkout@master
+
+      - name: 'Artifact: build && push alpine image'
+        uses: aevea/action-kaniko@master
+        with:
+          registry: artifact.onwalk.net
+          username: admin 
+          password: ${{ secrets.HELM_REPO_PASSWORD }}
+          build_file: ./dockerfiles/alpine-with-ca.Dockerfile
+          image: k8s/alpine-ca
+          tag: 3.13
+          cache: true
+          cache_registry: cache

.github/workflows/flux-cli-image.yaml

@@ -0,0 +1,28 @@
+name: Build & push flux-cli image
+on:
+  pull_request:
+  push:
+    paths:
+      - 'dockerfiles/flux-cli.Dockerfile'
+      - '.github/workflows/flux-cli-image.yaml'
+    branches:
+      - main
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    name: Build docker image
+    steps:
+      - uses: actions/checkout@master
+
+      - name: 'Artifact: build && push fluxcd/flux-cli image'
+        uses: aevea/action-kaniko@master
+        with:
+          registry: artifact.onwalk.net
+          username: admin
+          password: ${{ secrets.HELM_REPO_PASSWORD }}
+          build_file: dockerfiles/flux-cli.Dockerfile
+          image: k8s/fluxcd/flux-cli
+          tag: v0.24.0
+          cache: true
+          cache_registry: cache

.github/workflows/flux-helm-controller-image.yaml

@@ -0,0 +1,28 @@
+name: Build & push flux-helm-controller image
+on:
+  pull_request:
+  push:
+    paths:
+      - 'dockerfiles/flux-helm-controller.Dockerfile'
+      - '.github/workflows/flux-helm-controller-image.yaml'
+    branches:
+      - main
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    name: Build docker image
+    steps:
+      - uses: actions/checkout@master
+
+      - name: 'Artifact: build && push fluxcd/flux-cli image'
+        uses: aevea/action-kaniko@master
+        with:
+          registry: artifact.onwalk.net
+          username: admin
+          password: ${{ secrets.HELM_REPO_PASSWORD }}
+          build_file: dockerfiles/flux-cli.Dockerfile
+          image: k8s/fluxcd/helm-controller
+          tag: v0.24.0
+          cache: true
+          cache_registry: cache

.github/workflows/flux-image-automation-controller.yaml

@@ -0,0 +1,28 @@
+name: Build & push flux-automation-controller image
+on:
+  pull_request:
+  push:
+    paths:
+      - 'dockerfiles/flux-image-automation-controller.Dockerfile'
+      - '.github/workflows/flux-image-automation-controller.yaml'
+    branches:
+      - main
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    name: Build docker image
+    steps:
+      - uses: actions/checkout@master
+
+      - name: 'Artifact: build && push fluxcd/flux-cli image'
+        uses: aevea/action-kaniko@master
+        with:
+          registry: artifact.onwalk.net
+          username: admin
+          password: ${{ secrets.HELM_REPO_PASSWORD }}
+          build_file: dockerfiles/flux-helm-controller.Dockerfile
+          image: k8s/fluxcd/image-automation-controller
+          tag: v0.24.0
+          cache: true
+          cache_registry: cache

.github/workflows/prometheus-to-cloudwatch-image.yaml

@@ -3,11 +3,11 @@ on:
   pull_request:
   push:
     paths:
-      - 'main.go'
-      - 'Makefile'
-      - 'Dockerfile'
-      - 'prometheus_to_cloudwatch.go'
-      - '.github/workflows/images.yaml'
+      - 'prometheus-to-cloudwatch/main.go'
+      - 'prometheus-to-cloudwatch/Makefile'
+      - 'prometheus-to-cloudwatch/Dockerfile'
+      - 'prometheus-to-cloudwatch/prometheus_to_cloudwatch.go'
+      - '.github/workflows/prometheus-to-cloudwatch-image.yaml'
     branches:
       - main
 

dockerfiles/alpine-with-ca.Dockerfile

@@ -0,0 +1,4 @@
+FROM alpine:3.13
+RUN apk add --no-cache curl ca-certificates
+RUN cd /usr/share/ca-certificates/ && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201.cer -o RocheRootCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA1.cer -o RocheEnterpriseCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA2.cer -o RocheEnterpriseCA2.cer && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201%20-%20G2.crt -o RocheRootCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20Enterprise%20CA%201%20-%20G2.crt -o RocheEnterpriseCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Root%20CA.crt -o RocheG3RootCA.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%201.crt -o RocheG3IssuingCA1.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%202.crt -o RocheG3IssuingCA2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%203.crt -o RocheG3IssuingCA3.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%204.crt -o RocheG3IssuingCA4.crt && update-ca-certificates  
+ENTRYPOINT [ "/bin/sh" ]

dockerfiles/flux-cli.Dockerfile

@@ -0,0 +1,7 @@
+FROM ghcr.io/fluxcd/flux-cli:v0.24.0
+
+RUN apk add --no-cache curl ca-certificates
+RUN cd /usr/share/ca-certificates/ && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201.cer -o RocheRootCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA1.cer -o RocheEnterpriseCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA2.cer -o RocheEnterpriseCA2.cer && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201%20-%20G2.crt -o RocheRootCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20Enterprise%20CA%201%20-%20G2.crt -o RocheEnterpriseCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Root%20CA.crt -o RocheG3RootCA.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%201.crt -o RocheG3IssuingCA1.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%202.crt -o RocheG3IssuingCA2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%203.crt -o RocheG3IssuingCA3.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%204.crt -o RocheG3IssuingCA4.crt && update-ca-certificates
+
+USER 65534:65534
+ENTRYPOINT [ "flux" ]

dockerfiles/flux-helm-controller.Dockerfile

@@ -0,0 +1,7 @@
+FROM ghcr.io/fluxcd/helm-controller:v0.24.0
+
+RUN cd /usr/share/ca-certificates/ && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201.cer -o RocheRootCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA1.cer -o RocheEnterpriseCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA2.cer -o RocheEnterpriseCA2.cer && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201%20-%20G2.crt -o RocheRootCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20Enterprise%20CA%201%20-%20G2.crt -o RocheEnterpriseCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Root%20CA.crt -o RocheG3RootCA.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%201.crt -o RocheG3IssuingCA1.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%202.crt -o RocheG3IssuingCA2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%203.crt -o RocheG3IssuingCA3.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%204.crt -o RocheG3IssuingCA4.crt && update-ca-certificates
+
+USER 65534:65534
+
+ENTRYPOINT [ "/sbin/tini", "--", "helm-controller" ]

dockerfiles/flux-image-automation-controller.Dockerfile

@@ -0,0 +1,7 @@
+FROM ghcr.io/fluxcd/image-automation-controller:v0.24.0
+
+RUN apk add --no-cache curl ca-certificates
+RUN cd /usr/share/ca-certificates/ && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201.cer -o RocheRootCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA1.cer -o RocheEnterpriseCA1.cer && curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA2.cer -o RocheEnterpriseCA2.cer && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201%20-%20G2.crt -o RocheRootCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20Enterprise%20CA%201%20-%20G2.crt -o RocheEnterpriseCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Root%20CA.crt -o RocheG3RootCA.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%201.crt -o RocheG3IssuingCA1.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%202.crt -o RocheG3IssuingCA2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%203.crt -o RocheG3IssuingCA3.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%204.crt -o RocheG3IssuingCA4.crt && update-ca-certificates
+
+USER 65534:65534
+ENTRYPOINT [ "image-automation-controller" ]