mirror of
https://github.com/k8snetworkplumbingwg/multus-cni.git
synced 2026-07-12 02:47:02 +00:00
e5d19fff6b
This change introduces per-node certification for multus pods. Once multus pod is launched, then specified bootstrap kubeconfig is used for initial access, then multus sends CSR request to kube API to get original certs for kube API access. Once it is accepted then the multus pod uses generated certs for kube access.
22 lines
792 B
Docker
22 lines
792 B
Docker
# This Dockerfile is used to build the image available on DockerHub
|
|
FROM --platform=$BUILDPLATFORM golang:1.21 as build
|
|
|
|
# Add everything
|
|
ADD . /usr/src/multus-cni
|
|
|
|
ARG TARGETPLATFORM
|
|
RUN cd /usr/src/multus-cni && \
|
|
./hack/build-go.sh
|
|
|
|
FROM gcr.io/distroless/base-debian11:debug
|
|
LABEL org.opencontainers.image.source https://github.com/k8snetworkplumbingwg/multus-cni
|
|
COPY --from=build /usr/src/multus-cni/bin /usr/src/multus-cni/bin
|
|
COPY --from=build /usr/src/multus-cni/LICENSE /usr/src/multus-cni/LICENSE
|
|
WORKDIR /
|
|
|
|
COPY --from=build /usr/src/multus-cni/bin/install_multus /
|
|
COPY --from=build /usr/src/multus-cni/bin/thin_entrypoint /
|
|
COPY --from=build /usr/src/multus-cni/bin/kubeconfig_generator /
|
|
COPY --from=build /usr/src/multus-cni/bin/cert-approver /
|
|
CMD ["/thin_entrypoint"]
|