Container image definitions for the Ploigos project

Defines the base Ploigos container image, from which all other Ploigos images derive.

Defines a jenkins agent as a sidecar for the ploigos-tool-* containers. Built from ploigos-tool-java.

To be deprecated.

Custom Jenkins Controller that allows for CA root trust to be updated.

To be deprecated.

Custom Jenkins init image which installs a preset set of Jenkins plugins.

Defines an ArgoCD container image. Built from ploigos-base.

Defines a config-lint container image. Built from ploigos-base.

Defines a tools container that has tools for working with containers.

• buildah
• podman
• skopeo
• s2i

Required Capabilities for rootless container building:

• SETUID
• SETGID

Defines a tools container that has helm and helpful helm plugins.

Helm Plugins

• helm-secrets (SOPS)

Defines a Java base container image, built on top of ploigos-base, from which many Ploigos tool images derive.

Defines a maven container image. Built from ploigos-tool-java.

Defines a Maven JKube container image. Built from ploigos-tool-maven.

Defines a javascript container image. Built from ploigos-base.

Defines an OpenSCAP based image scanning container image. Built from ploigos-base.

Defines a tools container that has the tools for doing auto governance. Built from ploigos-base.

Tools

• rekor
• opa

Defines a sonar-scanner container image. Built from ploigos-base.

Layers sops and the helm-secrets plugin ontop of the base argocd-repo-server image.

The following github events to this repository will cause the publish GitHub workflow to kick off which will build, test, publish the images (that can) to quay.io/ploigos.

• schedule
  • everyday at 10:00am
• push
  • branches
    • main
  • tags
    • v*.*.*
  • pull_request

• ploigos-base
  • ubi8
• ploigos-tool-java
  • .java8.ubi8
  • .java11.ubi8 (default)
• ploigos-ci-agent-jenkins
  • .java8.ubi8
  • .java11.ubi8 (default)
• ploigos-jenkins
  • ubi8
• ploigos-jenkins-init
  • ubi8
• ploigos-tool-argocd
  • ubi8
• ploigos-tool-config-lint
  • ubi8
• ploigos-tool-containers
  • ubi8
• ploigos-tool-helm
  • ubi8
• ploigos-tool-maven
  • .java8.ubi8
  • .java11.ubi8 (default)
• ploigos-tool-jkube
  • .java8.ubi8
  • .java11.ubi8 (default)
• ploigos-tool-javascript
  • ubi8
• ploigos-tool-openscap
  • ubi8
• ploigos-tool-autogov
  • ubi8
• ploigos-tool-sonar
  • ubi8

The following commands can be used for building these images locally.

podman build --tag ploigos-base                                                            ploigos-base
podman build --tag ploigos-ci-agent-jenkins --build-arg BASE_IMAGE=ploigos-tool-java       ploigos-ci-agent-jenkins
podman build --tag ploigos-jenkins                                                         ploigos-jenkins
podman build --tag ploigos-jenkins-init                                                    ploigos-jenkins-init
podman build --tag ploigos-tool-argocd      --build-arg BASE_IMAGE=ploigos-base            ploigos-tool-argocd
podman build --tag ploigos-tool-config-lint --build-arg BASE_IMAGE=ploigos-base            ploigos-tool-config-lint
podman build --tag ploigos-tool-containers  --build-arg BASE_IMAGE=ploigos-base            ploigos-tool-containers
podman build --tag ploigos-tool-helm        --build-arg BASE_IMAGE=ploigos-base            ploigos-tool-helm
podman build --tag ploigos-tool-java        --build-arg BASE_IMAGE=ploigos-base            ploigos-tool-java
podman build --tag ploigos-tool-maven       --build-arg BASE_IMAGE=ploigos-tool-java       ploigos-tool-maven
podman build --tag ploigos-tool-javascript  --build-arg BASE_IMAGE=ploigos-base            ploigos-tool-javascript
podman build --tag ploigos-tool-jkube       --build-arg BASE_IMAGE=ploigos-tool-maven      ploigos-tool-jkube
podman build --tag ploigos-tool-openscap    --build-arg BASE_IMAGE=ploigos-tool-containers ploigos-tool-openscap
podman build --tag ploigos-tool-autogov     --build-arg BASE_IMAGE=ploigos-autogov         ploigos-tool-autogov
podman build --tag ploigos-tool-sonar       --build-arg BASE_IMAGE=ploigos-base            ploigos-tool-sonar
podman build --tag argocd-repo-server-sops  argocd-repo-server-sops -f ./Containerfile.ubi8

TODO

1. tag this repository with the release version
   • ex: v1.42.0
   • NOTE: must start with v