openshift-sdk/Dockerfile at master · slauger/openshift-sdk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
FROM registry.access.redhat.com/ubi9/ubi AS unarchive

ARG OPENSHIFT_RELEASE
ENV OPENSHIFT_RELEASE=${OPENSHIFT_RELEASE}

# renovate: datasource=github-tags depName=helm/helm
ARG HELM_RELEASE=4.1.3
# renovate: datasource=github-tags depName=hashicorp/vault
ARG VAULT_RELEASE=1.21.4
# renovate: datasource=github-tags depName=helmfile/helmfile
ARG HELMFILE_RELEASE=1.4.3
# renovate: datasource=github-tags depName=vmware/govmomi
ARG GOVC_RELEASE=0.53.0
# renovate: datasource=github-tags depName=mikefarah/yq
ARG YQ_RELEASE=4.52.5

RUN dnf -y install unzip

COPY openshift-install-linux-${OPENSHIFT_RELEASE}.tar.gz .
COPY openshift-client-linux-${OPENSHIFT_RELEASE}.tar.gz .

# OpenShift Binaries
RUN tar vxzf openshift-install-linux-${OPENSHIFT_RELEASE}.tar.gz openshift-install && \
    tar vxzf openshift-client-linux-${OPENSHIFT_RELEASE}.tar.gz oc && \
    tar vxzf openshift-client-linux-${OPENSHIFT_RELEASE}.tar.gz kubectl && \
    mv openshift-install /usr/local/bin/openshift-install && \
    mv oc /usr/local/bin/oc && \
    mv kubectl /usr/local/bin/kubectl && \
    rm openshift-install-linux-${OPENSHIFT_RELEASE}.tar.gz && \
    rm openshift-client-linux-${OPENSHIFT_RELEASE}.tar.gz

#  Helm Binary
RUN echo $HELM_RELEASE && \
    curl -vfLO https://get.helm.sh/helm-v${HELM_RELEASE}-linux-amd64.tar.gz && \
    tar vxzf helm-v${HELM_RELEASE}-linux-amd64.tar.gz linux-amd64/helm && \
    mv linux-amd64/helm /usr/local/bin/helm && \
    rm helm-v${HELM_RELEASE}-linux-amd64.tar.gz

# Helmfile Binary
RUN curl -vfLO https://github.com/helmfile/helmfile/releases/download/v${HELMFILE_RELEASE}/helmfile_${HELMFILE_RELEASE}_linux_amd64.tar.gz && \
    tar vxzf helmfile_${HELMFILE_RELEASE}_linux_amd64.tar.gz helmfile && \
    mv helmfile /usr/local/bin/helmfile && \
    rm helmfile_${HELMFILE_RELEASE}_linux_amd64.tar.gz

# Vault Binary
RUN curl -vfLO https://releases.hashicorp.com/vault/${VAULT_RELEASE}/vault_${VAULT_RELEASE}_linux_amd64.zip && \
    unzip vault_${VAULT_RELEASE}_linux_amd64.zip vault -d /usr/local/bin && \
    rm vault_${VAULT_RELEASE}_linux_amd64.zip

# govc Binary
RUN curl -vfLO https://github.com/vmware/govmomi/releases/download/v${GOVC_RELEASE}/govc_Linux_x86_64.tar.gz && \
    tar vxzf govc_Linux_x86_64.tar.gz govc && \
    mv govc /usr/local/bin/govc && \
    rm govc_Linux_x86_64.tar.gz

# yq Binary
RUN curl -vfLo /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v${YQ_RELEASE}/yq_linux_amd64 && \
    chmod +x /usr/local/bin/yq

FROM registry.access.redhat.com/ubi9/ubi

LABEL maintainer="simon@lauger.de"

ARG OPENSHIFT_RELEASE
ENV OPENSHIFT_RELEASE=${OPENSHIFT_RELEASE}

# Install requirements.
RUN sed -i 's/enabled=1/enabled=0/' /etc/yum/pluginconf.d/subscription-manager.conf \
 && yum makecache --timer \
 && yum -y install initscripts \
 && yum -y update \
 && yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm \
 && yum -y install \
      sudo \
      which \
      hostname \
      python3.12 \
      python3.12-pip \
      vim \
      git \
      wget \
      jq \
      pwgen \
      unzip \
      bind-utils \
      ca-certificates \
      openssh \
      openssl-libs \
      make \
      openssl-devel \
      libffi-devel \
 && yum clean all \
 && rm -rf /var/cache/dnf/*

# Python Dependencies
COPY requirements.txt /etc/requirements.txt
RUN pip3.12 install --no-cache-dir -r /etc/requirements.txt

# Ansible Collections
COPY requirements.yml /etc/requirements.yml
RUN ansible-galaxy collection install -r /etc/requirements.yml

# OpenShift Tools
COPY --from=unarchive /usr/local/bin/oc usr/local/bin/kubectl /usr/local/bin/openshift-install /usr/local/bin/

# External tools
COPY --from=unarchive /usr/local/bin/helm /usr/local/bin/helmfile /usr/local/bin/vault /usr/local/bin/govc /usr/local/bin/yq /usr/local/bin/

# Create workspace
RUN mkdir /workspace
WORKDIR /workspace