element maintainers added to image.yaml's

Add files images.yaml for groups k8s, flannel, cert-manager, insert files test.yaml into images.yaml in builds directories
change branches p*/c* workflow for new struct
2024-05-22 17:51:23 +05:00 · 2024-05-22 17:29:10 +05:00 · 2024-05-21 17:51:25 +03:00 · 2024-05-21 17:39:54 +03:00 · 2024-05-08 18:20:50 +03:00 · 2024-05-08 17:08:59 +03:00
158 changed files with 2449 additions and 328 deletions
--- a/.gitea/workflows/testscript
+++ b/.gitea/workflows/testscript
@ -0,0 +1,82 @@
+#!/bin/bash
+
+#$1 - ${{ needs.build-process.outputs.branch }}
+#$2 - ${{ needs.build-process.outputs.org }}
+#$3 - ${{ needs.build-process.outputs.url }}
+#$4 - ${{ needs.build-process.outputs.repo }}
+#$5 - ${{ gitea.workspace }}
+
+BR=${1:-"p10"}
+ORG=${2:-"base"}
+URL=${3:-"gitea.basealt.ru"}
+REPO=${4:-"alt"}
+WS=${5:-"image-forge"}
+
+errors=''
+haserr=false
+for IM in $(ls $WS/org/$ORG/ | xargs)
+do 
+  echo "image=$IM"
+  imgpath="$REPO/$BR/$IM:$BR"
+  command=''
+  testpath="$WS/org/$ORG/$IM/test.yaml"
+  if test -f $testpath
+  then
+	entrypoint=''
+	testep=$(cat $testpath | yq '.entrypoint' -r 2> /dev/null)
+	if [[ $testep != '' ]]; then entrypoint="--entrypoint=\"$testep\""; fi 
+
+	testcom=$(cat $testpath | yq '.command' -r 2> /dev/null)
+	if [[ $testcom != '' ]]
+	then command="podman run --rm $entrypoint $URL/$imgpath -c \"$testcom\""
+	else echo "test command is not found"
+	fi	
+  else echo "test file is not found"
+  fi
+  echo "result test command: $command"
+  eval $command 2>$IM.log || haserr=true
+
+  if [ "$haserr" = false ]
+  then
+    echo "start change tag for $IM"
+    if [[ $ORG != 'base' ]]
+    then
+	package=$(podman images --filter reference=$URL/$imgpath --format='{{ json .Labels }}' | jq '."org.opencontainers.image.title"' -r 2> /dev/null)
+    	if [[ $package != '' ]]
+    	then 
+		tag=$(podman run --rm --entrypoint="/bin/sh" $URL/$imgpath -c "rpm -qa --qf \"%{VERSION}\n\" $package" 2> /dev/null)
+	else
+		echo "not found package name in images labels"
+	fi 
+    else
+	then tag=$(date +"%Y%m%d")
+    fi
+
+    if [[ $tag != '' ]]
+    then 
+	    skopeo copy -a docker://$URL/$imgpath:$BR  docker://$URL/$imgpath:$tag
+	    scopeo delete docker://$URL/$imgpath:$BR
+	    echo "tag is updated"
+    else echo "new tag is empty and is not sent to repository"
+    fi
+
+  else
+    if [[ $(cat $IM.log) != '' ]]
+    then errors="TEST ERROR OF IMAGE $IM: $(cat $IM.log); $errors"
+    else errors="TEST ERROR OF IMAGE $IM: test returned empty error, but exit status was nozero; $errors"
+    fi
+  fi
+    
+  echo "podman rmi --all"
+  podman rmi --all
+
+  fi 
+  haserr=false
+done
+
+echo "$errors"
+if [[ $errors != '' ]]
+  then haserr=true 
+fi
+echo "ERR=$haserr" > haserr.log
+echo $errors > errors.log
--- a/.gitea/workflows/wf_full_p10.yaml
+++ b/.gitea/workflows/wf_full_p10.yaml
@ -0,0 +1,142 @@
+name: Full building alt images
+on:
+  push:
+    tags:
+      - '*_*'
+    tags-ignore:
+      - '*_k8s'
+      - 'sisyphus_*'
+
+jobs:
+  build-process:
+    runs-on: alt-p10
+    outputs:
+      branch: ${{ env.BRANCH }}
+      org: ${{ env.ORG }}
+      url: ${{ env.URL }}
+      repo: ${{ env.REPO }}
+      buildres: ${{ steps.build-script.outcome }}
+    steps:
+      - name: Check workspace
+        run: |
+          repourl=$(echo $GU | cut -d '/' -f 3)
+          echo "URL=$repourl" >> ${GITHUB_ENV}
+          echo $repourl
+          reponame=$(echo $GR | cut -d '/' -f 1)
+          echo "REPO=$reponame" >> ${GITHUB_ENV}
+          echo $reponame
+        env:
+          GU: ${{ gitea.server_url }}
+          GR: ${{ gitea.repository }}
+      - name: Set repo for c10f2 (Temporary)
+        if: ${{ contains(github.ref_name, 'c10f2') }}
+        run: |
+          echo "event tag=${{ github.ref_name }}" 
+          echo "10.4.0.3        update.altsp.su" >> /etc/hosts
+          echo "cat /etc/hosts"
+          cat /etc/hosts
+      - name: Update apt
+        uses: actions/init-alt-env@v1
+      - name: Install requires
+        run: |
+          echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl"
+          apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl
+          echo "apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc"
+          apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc          
+      - name: Check out current repo
+        uses: actions/checkout@v4
+      - name: Parse target branch and tag from events context, save to env                                
+        env:
+          EV: ${{ toJson(gitea.event) }}                                         
+        run: |
+          echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1
+          echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1 >> ${GITHUB_ENV}
+          org=$(echo $EV | jq '.ref' -r | sed 's/refs\/tags\///g' | cut -d '_' -f 2)
+          echo "ORG=$org" >> ${GITHUB_ENV}                              
+          echo "ORG=$org"
+      - name: Login podman gitea
+        run: |
+          echo "podman login ${{ env.URL }}"
+          podman login --username $P_USER --password $P_PASS ${{ env.URL }}          
+        env:
+          P_USER: ${{ secrets.PODMAN_USER }}
+          P_PASS: ${{ secrets.PODMAN_PASS }}
+      - name: Run standart building script
+        id: build-script
+        run: |
+          build_args="-b $BR -o $ORG --skip-images base/distroless-devel --overwrite-organization $BR --registry $URL/$BR"          
+          echo "build.py $build_args"
+          ${{ gitea.workspace }}/build.py $build_args
+        env:
+          ORG: ${{ env.ORG }}
+          BR: ${{ env.BRANCH }}
+        continue-on-error: true
+      - name: Send notification if build crashed
+        if: ${{ steps.build-script.outcome != 'success' }}
+        run: |
+          issueid=1
+          body="Building images finish with some errors."
+          curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
+          echo "notification about test error is sent to issue $issueid"
+        env:
+          T: ${{ secrets.TOKEN }}
+          BR: ${{ env.BRANCH }}
+          URL: ${{ gitea.server_url }}
+          REPO: ${{ env.REPO }}
+      - name: Delete event tag
+        run: |
+          tagname=$(echo $EV | jq '.ref' -r | sed "s/refs\/tags\///g")
+          curl -X 'DELETE' "$URL/api/v1/repos/$REPO/image-forge/tags/$tagname?token=$T" -H 'accept: application/json' -s
+          echo "tag $tagname is deleted"                    
+        env:
+          T: ${{ secrets.TOKEN }}
+          BR: ${{ env.BRANCH }}
+          URL: ${{ gitea.server_url }}
+          REPO: ${{ env.REPO }}
+          EV: ${{ toJson(gitea.event) }}
+  test-process:
+    needs: build-process
+    if: ${{ needs.build-process.outputs.buildres == 'success' }}
+    runs-on: alt-p10
+    steps:
+      - name: Update apt
+        uses: actions/init-alt-env@v1
+      - name: Install requires
+        run: |
+          echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah skopeo jq yq curl"
+          apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl
+      - name: Check out current repo
+        uses: https://gitea.com/actions/checkout@v4
+      - name: Login podman gitea
+        run: |
+          echo "podman login ${{ env.URL }}"
+          podman login --username $P_USER --password $P_PASS ${{ needs.build-process.outputs.url }}          
+        env:
+          P_USER: ${{ secrets.PODMAN_USER }}
+          P_PASS: ${{ secrets.PODMAN_PASS }}
+      - name: Test images and update tags
+        id: test-script
+        continue-on-error: true
+        run: |
+          $WS/.gitea/workflows/testscript $BR $ORG $URL $REPO $WS
+          cat haserr.log >> ${GITHUB_ENV}
+          echo "test process finished"
+        env:
+          BR: ${{ needs.build-process.outputs.branch }}
+          ORG: ${{ needs.build-process.outputs.org }}
+          URL: ${{ needs.build-process.outputs.url }}
+          REPO: ${{ needs.build-process.outputs.repo }}
+          WS: ${{ gitea.workspace }}
+      - name: Send notification if test crashed
+        if: ${{ env.ERR == 'true' || steps.test-script.outcome == 'failure' }}
+        run: |
+          issueid=1
+          errors=$(cat errors.log)
+          body="Testing images finish with some errors. $errors"
+          curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
+          echo "notification about test error is sent to issue $issueid"
+        env:
+          T: ${{ secrets.TOKEN }}
+          BR: ${{ needs.build-process.outputs.branch }}
+          URL: ${{ gitea.server_url }}
+          REPO: ${{ needs.build-process.outputs.repo }}
--- a/.gitea/workflows/wf_full_sis.yaml
+++ b/.gitea/workflows/wf_full_sis.yaml
@ -0,0 +1,126 @@
+name: Full building alt images
+on:
+  push:
+    tags:
+      - 'sisyphus_*'
+
+jobs:
+  build-process:
+    runs-on: alt-sisyphus
+    outputs:
+      branch: ${{ env.BRANCH }}
+      org: ${{ env.ORG }}
+      url: ${{ env.URL }}
+      repo: ${{ env.REPO }}
+      buildres: ${{ steps.build-script.outcome }}
+    steps:
+      - name: Check workspace
+        run: |
+          repourl=$(echo $GU | cut -d '/' -f 3)
+          echo "URL=$repourl" >> ${GITHUB_ENV}
+          echo $repourl
+          reponame=$(echo $GR | cut -d '/' -f 1)
+          echo "REPO=$reponame" >> ${GITHUB_ENV}
+          echo $reponame
+        env:
+          GU: ${{ gitea.server_url }}
+          GR: ${{ gitea.repository }}
+      - name: Update apt
+        uses: actions/init-alt-env@v1
+      - name: Install requires
+        run: |
+          echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl"
+          apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl
+          echo "apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc"
+          apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc          
+      - name: Check out current repo
+        uses: actions/checkout@v4
+      - name: Parse target branch and tag from events context, save to env                                
+        env:
+          EV: ${{ toJson(gitea.event) }}                                         
+        run: |
+          echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1
+          echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1 >> ${GITHUB_ENV}
+          org=$(echo $EV | jq '.ref' -r | sed 's/refs\/tags\///g' | cut -d '_' -f 2)
+          echo "ORG=$org" >> ${GITHUB_ENV}                              
+          echo "ORG=$org"
+      - name: Login podman gitea
+        run: |
+          echo "podman login ${{ env.URL }}"
+          podman login --username $P_USER --password $P_PASS ${{ env.URL }}          
+        env:
+          P_USER: ${{ secrets.PODMAN_USER }}
+          P_PASS: ${{ secrets.PODMAN_PASS }}
+      - name: Run building script
+        id: build-script
+        run: |
+          build_args="-b $BR -o $ORG --skip-images alt/distroless-devel"          
+          if [[ $ORG == 'k8s' ]]; then build_args="$build_args --tags tags.toml --overwrite-organization $ORG-$BR --skip-images k8s/kube-apiserver k8s/kube-controller-manager k8s/kube-proxy k8s/kube-scheduler"; fi
+          echo "build.py $build_args"
+          ${{ gitea.workspace }}/build.py $build_args
+        env:
+          ORG: ${{ env.ORG }}
+          BR: ${{ env.BRANCH }}
+        continue-on-error: true
+      - name: Send notification if build crashed
+        if: ${{ steps.build-script.outcome != 'success' }}
+        run: |
+          issueid=1
+          body="Building images finish with some errors."
+          curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
+          echo "notification about test error is sent to issue $issueid"
+        env:
+          T: ${{ secrets.TOKEN }}
+          BR: ${{ env.BRANCH }}
+          URL: ${{ gitea.server_url }}
+          REPO: ${{ env.REPO }}
+      - name: Delete event tag
+        run: |
+          tagname=$(echo $EV | jq '.ref' -r | sed "s/refs\/tags\///g")
+          curl -X 'DELETE' "$URL/api/v1/repos/$REPO/image-forge/tags/$tagname?token=$T" -H 'accept: application/json' -s
+          echo "tag $tagname is deleted"                    
+        env:
+          T: ${{ secrets.TOKEN }}
+          BR: ${{ env.BRANCH }}
+          URL: ${{ gitea.server_url }}
+          REPO: ${{ env.REPO }}
+          EV: ${{ toJson(gitea.event) }}
+  test-process:
+    needs: build-process
+    if: ${{ needs.build-process.outputs.buildres == 'success' }}
+    runs-on: alt-sisyphus
+    steps:
+      - name: Update apt
+        uses: actions/init-alt-env@v1
+      - name: Install requires
+        run: |
+          echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl"
+          apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl
+      - name: Check out current repo
+        uses: https://gitea.com/actions/checkout@v4
+      - name: Test
+        id: test-script
+        continue-on-error: true
+        run: |
+          $WS/.gitea/workflows/testscript $BR $ORG $URL $REPO $WS
+          cat haserr.log >> ${GITHUB_ENV}
+          echo "test process finished"
+        env:
+          BR: ${{ needs.build-process.outputs.branch }}
+          ORG: ${{ needs.build-process.outputs.org }}
+          URL: ${{ needs.build-process.outputs.url }}
+          REPO: ${{ needs.build-process.outputs.repo }}
+          WS: ${{ gitea.workspace }}
+      - name: Send notification if test crashed
+        if: ${{ env.ERR == 'true' || steps.test-script.outcome == 'failure' }}
+        run: |
+          issueid=1
+          errors=$(cat errors.log)
+          body="Testing images finish with some errors. $errors"
+          curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
+          echo "notification about test error is sent to issue $issueid"
+        env:
+          T: ${{ secrets.TOKEN }}
+          BR: ${{ needs.build-process.outputs.branch }}
+          URL: ${{ gitea.server_url }}
+          REPO: ${{ needs.build-process.outputs.repo }}
--- a/build.py
+++ b/build.py
@ -225,7 +225,7 @@ class DockerBuilder:
        self,
        template: str,
        organization: str,
-        install_pakages=None,
+        install_packages=None,
        **kwargs,
    ) -> str:
        if self.registry:
@ -237,7 +237,7 @@ class DockerBuilder:
        rendered = Template(template).render(
            alt_image=alt_image,
            branch=self.branch,
-            install_pakages=install_pakages,
+            install_packages=install_packages,
            organization=organization,
            registry=registry,
            **kwargs,
@ -247,7 +247,7 @@ class DockerBuilder:

    @forall_images(consume_result=True)
    def render_dockerfiles(self, **kwargs):
-        def install_pakages(*names):
+        def install_packages(*names):
            tasks = self.tasks.get(self.branch, kwargs["image"])
            linux32 = '$([ "$(rpm --eval %_host_cpu)" = i586 ] && echo linux32)'
            if tasks:
@ -273,7 +273,7 @@ class DockerBuilder:
            rendered = self.render_template(
                dockerfile_template.read_text(),
                self.overwrite_organization,
-                install_pakages,
+                install_packages,
            )
            kwargs["dockerfile"].write_text(rendered + "\n")

@ -638,8 +638,8 @@ class ImagesInfo:

 def parse_args():
    stages = ["build", "remove_dockerfiles", "render_dockerfiles", "push"]
-    arches = ["amd64", "386", "arm64", "arm", "ppc64le"]
-    branches = ["p9", "p10", "sisyphus"]
+    arches = ["amd64", "386", "arm64"]
+    branches = ["p10", "sisyphus", "c10f1", "c10f2"]
    organizations = list(ORG_DIR.iterdir())
    images = [f"{o.name}/{i.name}" for o in organizations for i in o.iterdir()]
    organizations = [o.name for o in organizations]
@ -654,7 +654,8 @@ def parse_args():
        nargs="+",
        default=images,
        choices=images,
-        help="list of branches",
+        metavar="IMAGE_NAME",
+        help="list of images to build",
    )
    images_group.add_argument(
        "-o",
@ -664,10 +665,18 @@ def parse_args():
        choices=organizations,
        help="build all images from these organizations",
    )
+    parser.add_argument(
+        "--skip-images",
+        nargs="+",
+        default=[],
+        choices=images,
+        metavar="IMAGE_NAME",
+        help="list of images to skip",
+    )
    parser.add_argument(
        "-r",
        "--registry",
-        default="registry.altlinux.org",
+        default="gitea.basealt.ru",
    )
    parser.add_argument(
        "--overwrite-organization",
@ -696,27 +705,20 @@ def parse_args():
    parser.add_argument(
        "--sign",
    )
-    parser.add_argument(
-        "--skip-images",
-        nargs="+",
-        default=[],
-        choices=images,
-        help="list of skipping images",
-    )
    parser.add_argument(
        "-a",
        "--arches",
        nargs="+",
        default=arches,
        choices=arches,
-        help="list of arches",
+        help="build images for these architectures",
    )
    parser.add_argument(
        "--skip-arches",
        nargs="+",
        default=[],
        choices=arches,
-        help="list of skipping arches",
+        help="list of architectures to skip",
    )
    parser.add_argument(
        "-b",
@ -724,28 +726,28 @@ def parse_args():
        nargs="+",
        default=branches,
        choices=branches,
-        help="list of branches",
+        help="build images for these branches",
    )
    parser.add_argument(
        "--skip-branches",
        nargs="+",
        default=[],
        choices=branches,
-        help="list of skipping branches",
+        help="list of branches to skip",
    )
    parser.add_argument(
        "--stages",
        nargs="+",
        default=stages,
        choices=stages,
-        help="list of stages",
+        help="list of stages to go through",
    )
    parser.add_argument(
        "--skip-stages",
        nargs="+",
        default=[],
        choices=stages,
-        help="list of skipping stages",
+        help="list of stages to skip",
    )
    args = parser.parse_args()

--- a/org/alt/apache2/Dockerfile.template
+++ b/org/alt/apache2/Dockerfile.template
@ -1,9 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("apache2") }}
-
-EXPOSE 80
-
-CMD ["/usr/sbin/httpd2", "-D", "NO_DETACH", "-k", "start"]
--- a/org/alt/buildpack-deps-curl/Dockerfile.template
+++ b/org/alt/buildpack-deps-curl/Dockerfile.template
@ -1,10 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages(
-    "ca-certificates",
-    "curl",
-    "gnupg",
-    "wget"
-) }}
--- a/org/alt/devel/Dockerfile.template
+++ b/org/alt/devel/Dockerfile.template
@ -1,29 +0,0 @@
-FROM {{ registry }}{{ organization }}/base:{{ branch }}
-
-MAINTAINER alt-cloud
-
-# install editor
-{{ install_pakages("vim-console") }}
-
-# install debugging tools
-{{ install_pakages("strace", "gdb") }}
-
-# install document viewers
-{{ install_pakages("man") }}
-
-# install version control system
-{{ install_pakages("git-core", "perl-Git") }}
-
-# install network utils
-{{ install_pakages("iproute2", "iputils", "wget", "curl") }}
-
-# install file utils
-{{ install_pakages("lsof", "ripgrep") }}
-
-# install shell and completions
-{{ install_pakages("zsh", "zsh-completions") }}
-
-# install compilation utils
-{{ install_pakages("make", "gcc", "gcc-c++") }}
-
-CMD ["zsh"]
--- a/org/alt/distroless-builder/Dockerfile.template
+++ b/org/alt/distroless-builder/Dockerfile.template
@ -1,11 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-RUN echo %_excludedocs 1 >> /etc/rpm/macros
-RUN rpm -qalds | awk '/^normal/{print $2}' | xargs rm -rf
-{{ install_pakages("python3", "glibc-utils", "apt-repo") }}
-WORKDIR /usr/src/distroless
-RUN mkdir file-lists
-RUN useradd -m nonroot
-COPY distroless-builder.py .
--- a/org/alt/distroless-builder/README.md
+++ b/org/alt/distroless-builder/README.md
@ -1,3 +0,0 @@
-ALT dockerfile for distroless-builder image.
-
-This images is using to build tarball for distroless images.
--- a/org/alt/etcd/Dockerfile.template
+++ b/org/alt/etcd/Dockerfile.template
@ -1,9 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("etcd") }}
-
-VOLUME /data
-
-ENTRYPOINT ["/usr/sbin/etcd", "--data-dir", "/data"]
--- a/org/alt/gitea/Dockerfile.template
+++ b/org/alt/gitea/Dockerfile.template
@ -1,21 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("gitea", "openssh-server", "gosu") }}
-
-ENV USER gitea
-ENV HOME /var/lib/gitea
-ENV GITEA_WORK_DIR /var/lib/gitea
-
-WORKDIR /var/lib/gitea
-
-COPY app.ini /etc/gitea/app.ini
-COPY entrypoint.sh /entrypoint.sh
-
-EXPOSE 3000
-EXPOSE 2222
-
-VOLUME ["/var/lib/gitea"]
-
-ENTRYPOINT ["/entrypoint.sh"]
--- a/org/alt/node/Dockerfile.template
+++ b/org/alt/node/Dockerfile.template
@ -1,12 +0,0 @@
-FROM {{ registry }}{{ organization }}/buildpack-deps:{{ branch }}
-
-MAINTAINER alt-cloud
-
-RUN groupadd --gid 1000 node \
-    && useradd --uid 1000 --gid node --shell /bin/bash --create-home node
-
-{{ install_pakages(
-    "node",
-    "npm",
-    "yarn"
-) }}
--- a/org/alt/prometheus/Dockerfile.template
+++ b/org/alt/prometheus/Dockerfile.template
@ -1,11 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("prometheus") }}
-
-WORKDIR /var/lib/prometheus
-USER prometheus
-EXPOSE     9090
-VOLUME     [ "/var/lib/prometheus" ]
-ENTRYPOINT [ "/usr/bin/prometheus", "--config.file=/etc/prometheus/prometheus.yml"]
--- a/org/alt/python/Dockerfile.template
+++ b/org/alt/python/Dockerfile.template
@ -1,12 +0,0 @@
-FROM {{ registry }}{{ organization }}/base:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages(
-    "python3-module-pip",
-    "python3-module-setuptools",
-    "python3-dev",
-    "gcc",
-) }}
-
-CMD ["python3"]
--- a/org/alt/registry/Dockerfile.template
+++ b/org/alt/registry/Dockerfile.template
@ -1,15 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("docker-registry") }}
-
-RUN ln -sf /usr/bin/docker-registry /bin/registry
-
-VOLUME ["/var/lib/registry"]
-EXPOSE 5000
-
-COPY entrypoint.sh /entrypoint.sh
-ENTRYPOINT ["/entrypoint.sh"]
-
-CMD ["/etc/docker-registry/config.yml"]
--- a/org/alt/ruby/Dockerfile.template
+++ b/org/alt/ruby/Dockerfile.template
@ -1,7 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("irb") }}
-
-CMD ["irb"]
--- a/org/base/base/Dockerfile.template
+++ b/org/base/base/Dockerfile.template
@ -2,6 +2,6 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages("glibc-gconv-modules", "glibc-locales", "tzdata") }}
+{{ install_packages("glibc-gconv-modules", "glibc-locales", "tzdata") }}

 CMD ["bash"]
--- a/org/base/base/README.md
+++ b/org/base/base/README.md
--- a/org/base/base/image.yaml
+++ b/org/base/base/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: LC_ALL=ru_RU.UTF-8 TZ=/usr/share/zoneinfo/Europe/Moscow date| grep MSK
+maintainers: []
--- a/org/base/base/test.yaml
+++ b/org/base/base/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "LC_ALL=ru_RU.UTF-8 TZ=/usr/share/zoneinfo/Europe/Moscow date| grep MSK"
--- a/org/base/buildpack-deps-curl/Dockerfile.template
+++ b/org/base/buildpack-deps-curl/Dockerfile.template
@ -0,0 +1,14 @@
+FROM {{ registry }}{{ alt_image }}:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="buildpack-deps-curl"
+LABEL org.opencontainers.image.licenses="GPLv2"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages(
+    "ca-certificates",
+    "curl",
+    "gnupg",
+    "wget"
+) }}
--- a/org/base/buildpack-deps-curl/image.yaml
+++ b/org/base/buildpack-deps-curl/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: curl --version && gpg --version
+maintainers: []
--- a/org/base/buildpack-deps-curl/test.yaml
+++ b/org/base/buildpack-deps-curl/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "curl --version && gpg --version"
--- a/org/base/buildpack-deps-scm/Dockerfile.template
+++ b/org/base/buildpack-deps-scm/Dockerfile.template
@ -2,8 +2,11 @@ FROM {{ registry }}{{ organization }}/buildpack-deps-curl:{{ branch }}

 MAINTAINER alt-cloud

+LABEL org.opencontainers.image.title="buildpack-deps-scm"
+LABEL org.opencontainers.image.licenses="GPLv2"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"

-{{ install_pakages(
+{{ install_packages(
    "git",
    "mercurial",
    "openssh-clients",
--- a/org/base/buildpack-deps-scm/image.yaml
+++ b/org/base/buildpack-deps-scm/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: git --version && hg --version
+maintainers: []
--- a/org/base/buildpack-deps-scm/test.yaml
+++ b/org/base/buildpack-deps-scm/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "git --version && hg --version"
--- a/org/base/buildpack-deps/Dockerfile.template
+++ b/org/base/buildpack-deps/Dockerfile.template
@ -2,7 +2,11 @@ FROM {{ registry }}{{ organization }}/buildpack-deps-scm:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages(
+LABEL org.opencontainers.image.title="buildpack-deps"
+LABEL org.opencontainers.image.licenses="GPLv2"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages(
    "ImageMagick",
    "autoconf",
    "automake",
--- a/org/base/buildpack-deps/image.yaml
+++ b/org/base/buildpack-deps/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: gcc --version && make --version
+maintainers: []
--- a/org/base/buildpack-deps/test.yaml
+++ b/org/base/buildpack-deps/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "gcc --version && make --version"
--- a/org/base/devel/Dockerfile.template
+++ b/org/base/devel/Dockerfile.template
@ -0,0 +1,34 @@
+FROM {{ registry }}{{ organization }}/base:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="devel"
+LABEL org.opencontainers.image.description="This image is only for devel or testing purposes"
+LABEL org.opencontainers.image.licenses="GPLv2"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+# install editor
+{{ install_packages("vim-console") }}
+
+# install debugging tools
+{{ install_packages("strace", "gdb") }}
+
+# install document viewers
+{{ install_packages("man") }}
+
+# install version control system
+{{ install_packages("git-core", "perl-Git") }}
+
+# install network utils
+{{ install_packages("iproute2", "iputils", "wget", "curl") }}
+
+# install file utils
+{{ install_packages("lsof", "ripgrep") }}
+
+# install shell and completions
+{{ install_packages("zsh", "zsh-completions") }}
+
+# install compilation utils
+{{ install_packages("make", "gcc", "gcc-c++") }}
+
+CMD ["zsh"]
--- a/org/base/devel/README.md
+++ b/org/base/devel/README.md
--- a/org/base/devel/image.yaml
+++ b/org/base/devel/image.yaml
@ -0,0 +1,4 @@
+version: '1.0'
+kind: image
+test: man --version && ip -V && vim --version | grep vim
+maintainers: []
--- a/org/base/devel/test.yaml
+++ b/org/base/devel/test.yaml
@ -0,0 +1 @@
+man --version && ip -V && vim --version | grep vim
--- a/org/base/distroless-base/README.md
+++ b/org/base/distroless-base/README.md
--- a/org/base/distroless-base/distroless.toml
+++ b/org/base/distroless-base/distroless.toml
--- a/org/base/distroless-builder/Dockerfile.template
+++ b/org/base/distroless-builder/Dockerfile.template
@ -0,0 +1,16 @@
+FROM {{ registry }}{{ alt_image }}:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="distroless-builder"
+LABEL org.opencontainers.image.description="This image is used to build tarballs for distroless images"
+LABEL org.opencontainers.image.licenses="GPLv2"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+RUN echo %_excludedocs 1 >> /etc/rpm/macros
+RUN rpm -qalds | awk '/^normal/{print $2}' | xargs rm -rf
+{{ install_packages("python3", "glibc-utils", "apt-repo") }}
+WORKDIR /usr/src/distroless
+RUN mkdir file-lists
+RUN useradd -m nonroot
+COPY distroless-builder.py .
--- a/org/base/distroless-builder/README.md
+++ b/org/base/distroless-builder/README.md
@ -0,0 +1,3 @@
+ALT dockerfile for distroless-builder image.
+
+This image is used to build tarballs for distroless images.
--- a/org/base/distroless-builder/distroless-builder.py
+++ b/org/base/distroless-builder/distroless-builder.py
--- a/org/base/distroless-builder/image.yaml
+++ b/org/base/distroless-builder/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: apt-repo --version
+maintainers: []
--- a/org/base/distroless-builder/test.yaml
+++ b/org/base/distroless-builder/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "apt-repo --version"
--- a/org/base/distroless-devel/README.md
+++ b/org/base/distroless-devel/README.md
--- a/org/base/distroless-devel/distroless.toml
+++ b/org/base/distroless-devel/distroless.toml
--- a/org/base/distroless-devel/image.yaml
+++ b/org/base/distroless-devel/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: ss -V
+maintainers: []
--- a/org/base/distroless-devel/test.yaml
+++ b/org/base/distroless-devel/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "ss -V"
--- a/org/base/distroless-gotop/README.md
+++ b/org/base/distroless-gotop/README.md
--- a/org/base/distroless-gotop/distroless.toml
+++ b/org/base/distroless-gotop/distroless.toml
--- a/org/base/distroless-gotop/image.yaml
+++ b/org/base/distroless-gotop/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: ''
+  command: --version
+maintainers: []
--- a/org/base/distroless-gotop/test.yaml
+++ b/org/base/distroless-gotop/test.yaml
@ -0,0 +1,2 @@
+entrypoint: ""
+command: "--version"
--- a/org/base/distroless-static/README.md
+++ b/org/base/distroless-static/README.md
--- a/org/base/distroless-static/distroless.toml
+++ b/org/base/distroless-static/distroless.toml
--- a/org/base/distroless-static/static.list
+++ b/org/base/distroless-static/static.list
--- a/org/base/distroless-true/README.md
+++ b/org/base/distroless-true/README.md
--- a/org/base/distroless-true/distroless.toml
+++ b/org/base/distroless-true/distroless.toml
--- a/org/base/distroless-true/image.yaml
+++ b/org/base/distroless-true/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: ''
+  command: 'true'
+maintainers: []
--- a/org/base/distroless-true/test.yaml
+++ b/org/base/distroless-true/test.yaml
@ -0,0 +1,2 @@
+entrypoint: ""
+command: "true"
--- a/org/base/trivy/Dockerfile.template
+++ b/org/base/trivy/Dockerfile.template
@ -0,0 +1,13 @@
+FROM {{ registry }}{{ alt_image }}:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="trivy"
+LABEL org.opencontainers.image.description="A Fast Vulnerability Scanner for Containers"
+LABEL org.opencontainers.image.source="https://aquasecurity.github.io/trivy"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("trivy") }}
+
+ENTRYPOINT [ "trivy" ]
--- a/org/base/trivy/README.md
+++ b/org/base/trivy/README.md
@ -0,0 +1,10 @@
+dockerfiles-alt-trivy
+=====================
+
+ALT dockerfile for trivy.
+
+Copy dockerfile somewhere and built the image:
+`$ docker build --rm -t <username>/trivy .`
+
+And launch the trivy container
+`$ docker run -it <username>/trivy`
--- a/org/base/trivy/image.yaml
+++ b/org/base/trivy/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: trivy --version
+maintainers: []
--- a/org/base/trivy/test.yaml
+++ b/org/base/trivy/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "trivy --version"
--- a/org/cert-manager/cert-manager-cainjector/Dockerfile.template
+++ b/org/cert-manager/cert-manager-cainjector/Dockerfile.template
@ -0,0 +1,17 @@
+FROM {{ registry }}{{ alt_image }}:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="cert-manager-cainjector"
+LABEL org.opencontainers.image.description="Cainjector component for automatic provisioning and managing TLS certificates in Kubernetes"
+LABEL org.opencontainers.image.source="https://github.com/cert-manager/cert-manager"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("cert-manager") }}
+
+RUN groupadd -r -g 1000 cert-manger && useradd --no-log-init -r -u 1000 -g cert-manger cert-manger
+
+USER 1000
+
+ENTRYPOINT ["/usr/bin/cainjector"]
--- a/org/cert-manager/cert-manager-cainjector/image.yaml
+++ b/org/cert-manager/cert-manager-cainjector/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: cainjector --help
+maintainers: []
--- a/org/cert-manager/cert-manager-cainjector/test.yaml
+++ b/org/cert-manager/cert-manager-cainjector/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "cainjector --help"
--- a/org/cert-manager/cert-manager-controller/Dockerfile.template
+++ b/org/cert-manager/cert-manager-controller/Dockerfile.template
@ -0,0 +1,17 @@
+FROM {{ registry }}{{ alt_image }}:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="cert-manager-controller"
+LABEL org.opencontainers.image.description="Controller component for automatic provisioning and managing TLS certificates in Kubernetes"
+LABEL org.opencontainers.image.source="https://github.com/cert-manager/cert-manager"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("cert-manager") }}
+
+RUN groupadd -r -g 1000 cert-manger && useradd --no-log-init -r -u 1000 -g cert-manger cert-manger
+
+USER 1000
+
+ENTRYPOINT ["/usr/bin/controller"]
--- a/org/cert-manager/cert-manager-controller/image.yaml
+++ b/org/cert-manager/cert-manager-controller/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: controller --help
+maintainers: []
--- a/org/cert-manager/cert-manager-controller/test.yaml
+++ b/org/cert-manager/cert-manager-controller/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "controller --help"
--- a/org/cert-manager/cert-manager-webhook/Dockerfile.template
+++ b/org/cert-manager/cert-manager-webhook/Dockerfile.template
@ -0,0 +1,17 @@
+FROM {{ registry }}{{ alt_image }}:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="cert-manager-webhook"
+LABEL org.opencontainers.image.description="Webhook component for automatic provisioning and managing TLS certificates in Kubernetes"
+LABEL org.opencontainers.image.source="https://github.com/cert-manager/cert-manager"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("cert-manager") }}
+
+RUN groupadd -r -g 1000 cert-manger && useradd --no-log-init -r -u 1000 -g cert-manger cert-manger
+
+USER 1000
+
+ENTRYPOINT ["/usr/bin/webhook"]
--- a/org/cert-manager/cert-manager-webhook/image.yaml
+++ b/org/cert-manager/cert-manager-webhook/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: webhook --help
+maintainers: []
--- a/org/cert-manager/cert-manager-webhook/test.yaml
+++ b/org/cert-manager/cert-manager-webhook/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "webhook --help"
--- a/org/cert-manager/images.yaml
+++ b/org/cert-manager/images.yaml
@ -0,0 +1,403 @@
+version: 1.0
+imageSet:
+
+  - version: v1.26.0
+    cert-manager-cainjector:
+      tag: v1.26.0
+    cert-manager-controller:
+      tag: v1.26.0
+    cert-manager-webhook:
+      tag: v1.26.0
+
+  - version: v1.26.1
+    cert-manager-cainjector:
+      tag: v1.26.1
+    cert-manager-controller:
+      tag: v1.26.1
+    cert-manager-webhook:
+      tag: v1.26.1
+
+  - version: v1.26.2
+    cert-manager-cainjector:
+      tag: v1.26.2
+    cert-manager-controller:
+      tag: v1.26.2
+    cert-manager-webhook:
+      tag: v1.26.2
+
+  - version: v1.26.3
+    cert-manager-cainjector:
+      tag: v1.26.3
+    cert-manager-controller:
+      tag: v1.26.3
+    cert-manager-webhook:
+      tag: v1.26.3
+
+  - version: v1.26.4
+    cert-manager-cainjector:
+      tag: v1.26.4
+    cert-manager-controller:
+      tag: v1.26.4
+    cert-manager-webhook:
+      tag: v1.26.4
+
+  - version: v1.26.5
+    cert-manager-cainjector:
+      tag: v1.26.5
+    cert-manager-controller:
+      tag: v1.26.5
+    cert-manager-webhook:
+      tag: v1.26.5
+
+  - version: v1.26.6
+    cert-manager-cainjector:
+      tag: v1.26.6
+    cert-manager-controller:
+      tag: v1.26.6
+    cert-manager-webhook:
+      tag: v1.26.6
+
+  - version: v1.26.7
+    cert-manager-cainjector:
+      tag: v1.26.7
+    cert-manager-controller:
+      tag: v1.26.7
+    cert-manager-webhook:
+      tag: v1.26.7
+
+  - version: v1.26.8
+    cert-manager-cainjector:
+      tag: v1.26.8
+    cert-manager-controller:
+      tag: v1.26.8
+    cert-manager-webhook:
+      tag: v1.26.8
+
+  - version: v1.26.9
+    cert-manager-cainjector:
+      tag: v1.26.9
+    cert-manager-controller:
+      tag: v1.26.9
+    cert-manager-webhook:
+      tag: v1.26.9
+
+  - version: v1.26.10
+    cert-manager-cainjector:
+      tag: v1.26.10
+    cert-manager-controller:
+      tag: v1.26.10
+    cert-manager-webhook:
+      tag: v1.26.10
+
+  - version: v1.26.11
+    cert-manager-cainjector:
+      tag: v1.26.11
+    cert-manager-controller:
+      tag: v1.26.11
+    cert-manager-webhook:
+      tag: v1.26.11
+
+  - version: v1.26.12
+    cert-manager-cainjector:
+      tag: v1.26.12
+    cert-manager-controller:
+      tag: v1.26.12
+    cert-manager-webhook:
+      tag: v1.26.12
+
+  - version: v1.26.13
+    cert-manager-cainjector:
+      tag: v1.26.13
+    cert-manager-controller:
+      tag: v1.26.13
+    cert-manager-webhook:
+      tag: v1.26.13
+
+  - version: v1.26.14
+    cert-manager-cainjector:
+      tag: v1.26.14
+    cert-manager-controller:
+      tag: v1.26.14
+    cert-manager-webhook:
+      tag: v1.26.14
+
+  - version: v1.26.15
+    cert-manager-cainjector:
+      tag: v1.26.15
+    cert-manager-controller:
+      tag: v1.26.15
+    cert-manager-webhook:
+      tag: v1.26.15
+
+  - version: v1.27.0
+    cert-manager-cainjector:
+      tag: v1.27.0
+    cert-manager-controller:
+      tag: v1.27.0
+    cert-manager-webhook:
+      tag: v1.27.0
+
+  - version: v1.27.1
+    cert-manager-cainjector:
+      tag: v1.27.1
+    cert-manager-controller:
+      tag: v1.27.1
+    cert-manager-webhook:
+      tag: v1.27.1
+
+  - version: v1.27.2
+    cert-manager-cainjector:
+      tag: v1.27.2
+    cert-manager-controller:
+      tag: v1.27.2
+    cert-manager-webhook:
+      tag: v1.27.2
+
+  - version: v1.27.3
+    cert-manager-cainjector:
+      tag: v1.27.3
+    cert-manager-controller:
+      tag: v1.27.3
+    cert-manager-webhook:
+      tag: v1.27.3
+
+  - version: v1.27.4
+    cert-manager-cainjector:
+      tag: v1.27.4
+    cert-manager-controller:
+      tag: v1.27.4
+    cert-manager-webhook:
+      tag: v1.27.4
+
+  - version: v1.27.5
+    cert-manager-cainjector:
+      tag: v1.27.5
+    cert-manager-controller:
+      tag: v1.27.5
+    cert-manager-webhook:
+      tag: v1.27.5
+
+  - version: v1.27.6
+    cert-manager-cainjector:
+      tag: v1.27.6
+    cert-manager-controller:
+      tag: v1.27.6
+    cert-manager-webhook:
+      tag: v1.27.6
+
+  - version: v1.27.7
+    cert-manager-cainjector:
+      tag: v1.27.7
+    cert-manager-controller:
+      tag: v1.27.7
+    cert-manager-webhook:
+      tag: v1.27.7
+
+  - version: v1.27.8
+    cert-manager-cainjector:
+      tag: v1.27.8
+    cert-manager-controller:
+      tag: v1.27.8
+    cert-manager-webhook:
+      tag: v1.27.8
+
+  - version: v1.27.9
+    cert-manager-cainjector:
+      tag: v1.27.9
+    cert-manager-controller:
+      tag: v1.27.9
+    cert-manager-webhook:
+      tag: v1.27.9
+
+  - version: v1.27.10
+    cert-manager-cainjector:
+      tag: v1.27.10
+    cert-manager-controller:
+      tag: v1.27.10
+    cert-manager-webhook:
+      tag: v1.27.10
+
+  - version: v1.27.11
+    cert-manager-cainjector:
+      tag: v1.27.11
+    cert-manager-controller:
+      tag: v1.27.11
+    cert-manager-webhook:
+      tag: v1.27.11
+
+  - version: v1.27.12
+    cert-manager-cainjector:
+      tag: v1.27.12
+    cert-manager-controller:
+      tag: v1.27.12
+    cert-manager-webhook:
+      tag: v1.27.12
+
+  - version: v1.27.13
+    cert-manager-cainjector:
+      tag: v1.27.13
+    cert-manager-controller:
+      tag: v1.27.13
+    cert-manager-webhook:
+      tag: v1.27.13
+
+  - version: v1.27.14
+    cert-manager-cainjector:
+      tag: v1.27.14
+    cert-manager-controller:
+      tag: v1.27.14
+    cert-manager-webhook:
+      tag: v1.27.14
+
+  - version: v1.28.0
+    cert-manager-cainjector:
+      tag: v1.28.0
+    cert-manager-controller:
+      tag: v1.28.0
+    cert-manager-webhook:
+      tag: v1.28.0
+
+  - version: v1.28.1
+    cert-manager-cainjector:
+      tag: v1.28.1
+    cert-manager-controller:
+      tag: v1.28.1
+    cert-manager-webhook:
+      tag: v1.28.1
+
+  - version: v1.28.2
+    cert-manager-cainjector:
+      tag: v1.28.2
+    cert-manager-controller:
+      tag: v1.28.2
+    cert-manager-webhook:
+      tag: v1.28.2
+
+  - version: v1.28.3
+    cert-manager-cainjector:
+      tag: v1.28.3
+    cert-manager-controller:
+      tag: v1.28.3
+    cert-manager-webhook:
+      tag: v1.28.3
+
+  - version: v1.28.4
+    cert-manager-cainjector:
+      tag: v1.28.4
+    cert-manager-controller:
+      tag: v1.28.4
+    cert-manager-webhook:
+      tag: v1.28.4
+
+  - version: v1.28.5
+    cert-manager-cainjector:
+      tag: v1.28.5
+    cert-manager-controller:
+      tag: v1.28.5
+    cert-manager-webhook:
+      tag: v1.28.5
+
+  - version: v1.28.6
+    cert-manager-cainjector:
+      tag: v1.28.6
+    cert-manager-controller:
+      tag: v1.28.6
+    cert-manager-webhook:
+      tag: v1.28.6
+
+  - version: v1.28.7
+    cert-manager-cainjector:
+      tag: v1.28.7
+    cert-manager-controller:
+      tag: v1.28.7
+    cert-manager-webhook:
+      tag: v1.28.7
+
+  - version: v1.28.8
+    cert-manager-cainjector:
+      tag: v1.28.8
+    cert-manager-controller:
+      tag: v1.28.8
+    cert-manager-webhook:
+      tag: v1.28.8
+
+  - version: v1.28.9
+    cert-manager-cainjector:
+      tag: v1.28.9
+    cert-manager-controller:
+      tag: v1.28.9
+    cert-manager-webhook:
+      tag: v1.28.9
+
+  - version: v1.28.10
+    cert-manager-cainjector:
+      tag: v1.28.10
+    cert-manager-controller:
+      tag: v1.28.10
+    cert-manager-webhook:
+      tag: v1.28.10
+
+  - version: v1.29.0
+    cert-manager-cainjector:
+      tag: v1.29.0
+    cert-manager-controller:
+      tag: v1.29.0
+    cert-manager-webhook:
+      tag: v1.29.0
+
+  - version: v1.29.1
+    cert-manager-cainjector:
+      tag: v1.29.1
+    cert-manager-controller:
+      tag: v1.29.1
+    cert-manager-webhook:
+      tag: v1.29.1
+
+  - version: v1.29.2
+    cert-manager-cainjector:
+      tag: v1.29.2
+    cert-manager-controller:
+      tag: v1.29.2
+    cert-manager-webhook:
+      tag: v1.29.2
+
+  - version: v1.29.3
+    cert-manager-cainjector:
+      tag: v1.29.3
+    cert-manager-controller:
+      tag: v1.29.3
+    cert-manager-webhook:
+      tag: v1.29.3
+
+  - version: v1.29.4
+    cert-manager-cainjector:
+      tag: v1.29.4
+    cert-manager-controller:
+      tag: v1.29.4
+    cert-manager-webhook:
+      tag: v1.29.4
+
+  - version: v1.29.5
+    cert-manager-cainjector:
+      tag: v1.29.5
+    cert-manager-controller:
+      tag: v1.29.5
+    cert-manager-webhook:
+      tag: v1.29.5
+
+  - version: v1.30.0
+    cert-manager-cainjector:
+      tag: v1.30.0
+    cert-manager-controller:
+      tag: v1.30.0
+    cert-manager-webhook:
+      tag: v1.30.0
+
+  - version: v1.30.1
+    cert-manager-cainjector:
+      tag: v1.30.1
+    cert-manager-controller:
+      tag: v1.30.1
+    cert-manager-webhook:
+      tag: v1.30.1
+
--- a/org/flannel/flannel-cni-plugin/Dockerfile.template
+++ b/org/flannel/flannel-cni-plugin/Dockerfile.template
@ -0,0 +1,13 @@
+FROM {{ registry }}{{ alt_image }}:{{ branch }}
+
+MAINTAINER alt-cloud
+
+LABEL org.opencontainers.image.title="flannel-cni-plugin"
+LABEL org.opencontainers.image.description="CNI network plugin that is powered by flannel"
+LABEL org.opencontainers.image.source="https://github.com/flannel-io/cni-plugin"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("cni-plugin-flannel") }}
+
+RUN cp /usr/libexec/cni/flannel /flannel
--- a/org/flannel/flannel-cni-plugin/image.yaml
+++ b/org/flannel/flannel-cni-plugin/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: ''
+  command: flannel
+maintainers: []
--- a/org/flannel/flannel-cni-plugin/test.yaml
+++ b/org/flannel/flannel-cni-plugin/test.yaml
@ -0,0 +1,2 @@
+entrypoint: ""
+command: "flannel"
--- a/org/flannel/flannel/Dockerfile.template
+++ b/org/flannel/flannel/Dockerfile.template
@ -2,7 +2,13 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages(
+LABEL org.opencontainers.image.title="flannel"
+LABEL org.opencontainers.image.description="Network fabric for containers"
+LABEL org.opencontainers.image.source="https://github.com/flannel-io/flannel"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages(
    "iproute2",
    "net-tools",
    "ca-certificates",
--- a/org/flannel/flannel/image.yaml
+++ b/org/flannel/flannel/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: flanneld --version
+maintainers: []
--- a/org/flannel/flannel/test.yaml
+++ b/org/flannel/flannel/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "flanneld --version"
--- a/org/flannel/images.yaml
+++ b/org/flannel/images.yaml
@ -0,0 +1,147 @@
+version: 1.0
+imageSet:
+
+  - version: v0.19.0
+    flannel:
+      tag: v0.19.0
+    'flannel-cni-plugin':
+      tag: v1.1.0
+
+  - version: v0.19.1
+    flannel:
+      tag: v0.19.1
+    'flannel-cni-plugin':
+      tag: v1.1.0
+
+  - version: v0.19.2
+    flannel:
+      tag: v0.19.2
+    'flannel-cni-plugin':
+      tag: v1.1.0
+
+  - version: v0.20.0
+    flannel:
+      tag: v0.20.0
+    'flannel-cni-plugin':
+      tag: v1.1.0
+
+  - version: v0.20.1
+    flannel:
+      tag: v0.20.1
+    'flannel-cni-plugin':
+      tag: v1.1.0
+
+  - version: v0.20.2
+    flannel:
+      tag: v0.20.2
+    'flannel-cni-plugin':
+      tag: v1.1.0
+
+  - version: v0.21.0
+    flannel:
+      tag: v0.21.0
+    'flannel-cni-plugin':
+      tag: v1.1.2
+
+  - version: v0.21.1
+    flannel:
+      tag: v0.21.1
+    'flannel-cni-plugin':
+      tag: v1.1.2
+
+  - version: v0.21.2
+    flannel:
+      tag: v0.21.2
+    'flannel-cni-plugin':
+      tag: v1.1.2
+
+  - version: v0.21.3
+    flannel:
+      tag: v0.21.3
+    'flannel-cni-plugin':
+      tag: v1.1.2
+
+  - version: v0.21.4
+    flannel:
+      tag: v0.21.4
+    'flannel-cni-plugin':
+      tag: v1.1.2
+
+  - version: v0.21.5
+    flannel:
+      tag: v0.21.5
+    'flannel-cni-plugin':
+      tag: v1.1.2
+
+  - version: v0.22.0
+    flannel:
+      tag: v0.22.0
+    'flannel-cni-plugin':
+      tag: v1.1.2
+
+  - version: v0.22.1
+    flannel:
+      tag: v0.22.1
+    'flannel-cni-plugin':
+      tag: v1.2.0
+
+  - version: v0.22.2
+    flannel:
+      tag: v0.22.2
+    'flannel-cni-plugin':
+      tag: v1.2.0
+
+  - version: v0.22.3
+    flannel:
+      tag: v0.22.3
+    'flannel-cni-plugin':
+      tag: v1.2.0
+
+  - version: v0.23.0
+    flannel:
+      tag: v0.23.0
+    'flannel-cni-plugin':
+      tag: v1.2.0
+
+  - version: v0.24.0
+    flannel:
+      tag: v0.24.0
+    'flannel-cni-plugin':
+      tag: v1.2.0
+
+  - version: v0.24.1
+    flannel:
+      tag: v0.24.1
+    'flannel-cni-plugin':
+      tag: v1.2.0
+
+  - version: v0.24.2
+    flannel:
+      tag: v0.24.2
+    'flannel-cni-plugin':
+      tag: v1.4.0-flannel1
+
+  - version: v0.24.3
+    flannel:
+      tag: v0.24.3
+    'flannel-cni-plugin':
+      tag: v1.4.0-flannel1
+
+  - version: v0.24.4
+    flannel:
+      tag: v0.24.4
+    'flannel-cni-plugin':
+      tag: v1.4.0-flannel1
+
+  - version: v0.25.0
+    flannel:
+      tag: v0.25.0
+    'flannel-cni-plugin':
+      tag: v1.4.0-flannel1
+
+  - version: v0.25.1
+    flannel:
+      tag: v0.25.1
+    'flannel-cni-plugin':
+      tag: v1.4.0-flannel1
+
--- a/org/k8s/cert-manager-cainjector/Dockerfile.template
+++ b/org/k8s/cert-manager-cainjector/Dockerfile.template
@ -1,11 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("cert-manager") }}
-
-RUN groupadd -r -g 1000 cert-manger && useradd --no-log-init -r -u 1000 -g cert-manger cert-manger
-
-USER 1000
-
-ENTRYPOINT ["/usr/bin/cainjector"]
--- a/org/k8s/cert-manager-controller/Dockerfile.template
+++ b/org/k8s/cert-manager-controller/Dockerfile.template
@ -1,11 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("cert-manager") }}
-
-RUN groupadd -r -g 1000 cert-manger && useradd --no-log-init -r -u 1000 -g cert-manger cert-manger
-
-USER 1000
-
-ENTRYPOINT ["/usr/bin/controller"]
--- a/org/k8s/cert-manager-webhook/Dockerfile.template
+++ b/org/k8s/cert-manager-webhook/Dockerfile.template
@ -1,11 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("cert-manager") }}
-
-RUN groupadd -r -g 1000 cert-manger && useradd --no-log-init -r -u 1000 -g cert-manger cert-manger
-
-USER 1000
-
-ENTRYPOINT ["/usr/bin/webhook"]
--- a/org/k8s/coredns/Dockerfile.template
+++ b/org/k8s/coredns/Dockerfile.template
@ -2,6 +2,12 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages("coredns") }}
+LABEL org.opencontainers.image.title="coredns"
+LABEL org.opencontainers.image.description="CoreDNS is a DNS server that chains plugins"
+LABEL org.opencontainers.image.source="https://github.com/coredns/coredns"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("coredns") }}

 ENTRYPOINT ["/usr/bin/coredns"]
--- a/org/k8s/coredns/image.yaml
+++ b/org/k8s/coredns/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: coredns --version
+maintainers: []
--- a/org/k8s/coredns/test.yaml
+++ b/org/k8s/coredns/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "coredns --version"
--- a/org/k8s/etcd/Dockerfile.template
+++ b/org/k8s/etcd/Dockerfile.template
@ -2,7 +2,13 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages("etcd") }}
+LABEL org.opencontainers.image.title="etcd"
+LABEL org.opencontainers.image.description="Distributed reliable key-value store for the most critical data of a distributed system"
+LABEL org.opencontainers.image.source="https://github.com/etcd-io/etcd"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("etcd") }}

 VOLUME /data

--- a/org/k8s/etcd/image.yaml
+++ b/org/k8s/etcd/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: etcd --version
+maintainers: []
--- a/org/k8s/etcd/test.yaml
+++ b/org/k8s/etcd/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "etcd --version"
--- a/org/k8s/flannel-cni-plugin/Dockerfile.template
+++ b/org/k8s/flannel-cni-plugin/Dockerfile.template
@ -1,7 +0,0 @@
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-MAINTAINER alt-cloud
-
-{{ install_pakages("cni-plugin-flannel") }}
-
-RUN cp /usr/libexec/cni/flannel /flannel
--- a/org/k8s/images.yaml
+++ b/org/k8s/images.yaml
@ -0,0 +1,803 @@
+version: 1.0
+imageSet:
+
+  - version: v1.26.0
+    kube-apiserver:
+      tag: v1.26.0
+    kube-controllermanager:
+      tag: v1.26.0
+    kube-proxy:
+      tag: v1.26.0
+    kube-scheduler:
+      tag: v1.26.0
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.1
+    kube-apiserver:
+      tag: v1.26.1
+    kube-controllermanager:
+      tag: v1.26.1
+    kube-proxy:
+      tag: v1.26.1
+    kube-scheduler:
+      tag: v1.26.1
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.2
+    kube-apiserver:
+      tag: v1.26.2
+    kube-controllermanager:
+      tag: v1.26.2
+    kube-proxy:
+      tag: v1.26.2
+    kube-scheduler:
+      tag: v1.26.2
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.3
+    kube-apiserver:
+      tag: v1.26.3
+    kube-controllermanager:
+      tag: v1.26.3
+    kube-proxy:
+      tag: v1.26.3
+    kube-scheduler:
+      tag: v1.26.3
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.4
+    kube-apiserver:
+      tag: v1.26.4
+    kube-controllermanager:
+      tag: v1.26.4
+    kube-proxy:
+      tag: v1.26.4
+    kube-scheduler:
+      tag: v1.26.4
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.5
+    kube-apiserver:
+      tag: v1.26.5
+    kube-controllermanager:
+      tag: v1.26.5
+    kube-proxy:
+      tag: v1.26.5
+    kube-scheduler:
+      tag: v1.26.5
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.6
+    kube-apiserver:
+      tag: v1.26.6
+    kube-controllermanager:
+      tag: v1.26.6
+    kube-proxy:
+      tag: v1.26.6
+    kube-scheduler:
+      tag: v1.26.6
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.7
+    kube-apiserver:
+      tag: v1.26.7
+    kube-controllermanager:
+      tag: v1.26.7
+    kube-proxy:
+      tag: v1.26.7
+    kube-scheduler:
+      tag: v1.26.7
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.8
+    kube-apiserver:
+      tag: v1.26.8
+    kube-controllermanager:
+      tag: v1.26.8
+    kube-proxy:
+      tag: v1.26.8
+    kube-scheduler:
+      tag: v1.26.8
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.9
+    kube-apiserver:
+      tag: v1.26.9
+    kube-controllermanager:
+      tag: v1.26.9
+    kube-proxy:
+      tag: v1.26.9
+    kube-scheduler:
+      tag: v1.26.9
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.6-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.10
+    kube-apiserver:
+      tag: v1.26.10
+    kube-controllermanager:
+      tag: v1.26.10
+    kube-proxy:
+      tag: v1.26.10
+    kube-scheduler:
+      tag: v1.26.10
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.11
+    kube-apiserver:
+      tag: v1.26.11
+    kube-controllermanager:
+      tag: v1.26.11
+    kube-proxy:
+      tag: v1.26.11
+    kube-scheduler:
+      tag: v1.26.11
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.12
+    kube-apiserver:
+      tag: v1.26.12
+    kube-controllermanager:
+      tag: v1.26.12
+    kube-proxy:
+      tag: v1.26.12
+    kube-scheduler:
+      tag: v1.26.12
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.13
+    kube-apiserver:
+      tag: v1.26.13
+    kube-controllermanager:
+      tag: v1.26.13
+    kube-proxy:
+      tag: v1.26.13
+    kube-scheduler:
+      tag: v1.26.13
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.14
+    kube-apiserver:
+      tag: v1.26.14
+    kube-controllermanager:
+      tag: v1.26.14
+    kube-proxy:
+      tag: v1.26.14
+    kube-scheduler:
+      tag: v1.26.14
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.26.15
+    kube-apiserver:
+      tag: v1.26.15
+    kube-controllermanager:
+      tag: v1.26.15
+    kube-proxy:
+      tag: v1.26.15
+    kube-scheduler:
+      tag: v1.26.15
+    coredns:
+      tag: v1.9.3
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.0
+    kube-apiserver:
+      tag: v1.27.0
+    kube-controllermanager:
+      tag: v1.27.0
+    kube-proxy:
+      tag: v1.27.0
+    kube-scheduler:
+      tag: v1.27.0
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.7-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.1
+    kube-apiserver:
+      tag: v1.27.1
+    kube-controllermanager:
+      tag: v1.27.1
+    kube-proxy:
+      tag: v1.27.1
+    kube-scheduler:
+      tag: v1.27.1
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.7-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.2
+    kube-apiserver:
+      tag: v1.27.2
+    kube-controllermanager:
+      tag: v1.27.2
+    kube-proxy:
+      tag: v1.27.2
+    kube-scheduler:
+      tag: v1.27.2
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.7-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.3
+    kube-apiserver:
+      tag: v1.27.3
+    kube-controllermanager:
+      tag: v1.27.3
+    kube-proxy:
+      tag: v1.27.3
+    kube-scheduler:
+      tag: v1.27.3
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.7-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.4
+    kube-apiserver:
+      tag: v1.27.4
+    kube-controllermanager:
+      tag: v1.27.4
+    kube-proxy:
+      tag: v1.27.4
+    kube-scheduler:
+      tag: v1.27.4
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.7-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.5
+    kube-apiserver:
+      tag: v1.27.5
+    kube-controllermanager:
+      tag: v1.27.5
+    kube-proxy:
+      tag: v1.27.5
+    kube-scheduler:
+      tag: v1.27.5
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.7-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.6
+    kube-apiserver:
+      tag: v1.27.6
+    kube-controllermanager:
+      tag: v1.27.6
+    kube-proxy:
+      tag: v1.27.6
+    kube-scheduler:
+      tag: v1.27.6
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.7-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.7
+    kube-apiserver:
+      tag: v1.27.7
+    kube-controllermanager:
+      tag: v1.27.7
+    kube-proxy:
+      tag: v1.27.7
+    kube-scheduler:
+      tag: v1.27.7
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.8
+    kube-apiserver:
+      tag: v1.27.8
+    kube-controllermanager:
+      tag: v1.27.8
+    kube-proxy:
+      tag: v1.27.8
+    kube-scheduler:
+      tag: v1.27.8
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.9
+    kube-apiserver:
+      tag: v1.27.9
+    kube-controllermanager:
+      tag: v1.27.9
+    kube-proxy:
+      tag: v1.27.9
+    kube-scheduler:
+      tag: v1.27.9
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.10
+    kube-apiserver:
+      tag: v1.27.10
+    kube-controllermanager:
+      tag: v1.27.10
+    kube-proxy:
+      tag: v1.27.10
+    kube-scheduler:
+      tag: v1.27.10
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.11
+    kube-apiserver:
+      tag: v1.27.11
+    kube-controllermanager:
+      tag: v1.27.11
+    kube-proxy:
+      tag: v1.27.11
+    kube-scheduler:
+      tag: v1.27.11
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.12
+    kube-apiserver:
+      tag: v1.27.12
+    kube-controllermanager:
+      tag: v1.27.12
+    kube-proxy:
+      tag: v1.27.12
+    kube-scheduler:
+      tag: v1.27.12
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.13
+    kube-apiserver:
+      tag: v1.27.13
+    kube-controllermanager:
+      tag: v1.27.13
+    kube-proxy:
+      tag: v1.27.13
+    kube-scheduler:
+      tag: v1.27.13
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.27.14
+    kube-apiserver:
+      tag: v1.27.14
+    kube-controllermanager:
+      tag: v1.27.14
+    kube-proxy:
+      tag: v1.27.14
+    kube-scheduler:
+      tag: v1.27.14
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.0
+    kube-apiserver:
+      tag: v1.28.0
+    kube-controllermanager:
+      tag: v1.28.0
+    kube-proxy:
+      tag: v1.28.0
+    kube-scheduler:
+      tag: v1.28.0
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.1
+    kube-apiserver:
+      tag: v1.28.1
+    kube-controllermanager:
+      tag: v1.28.1
+    kube-proxy:
+      tag: v1.28.1
+    kube-scheduler:
+      tag: v1.28.1
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.2
+    kube-apiserver:
+      tag: v1.28.2
+    kube-controllermanager:
+      tag: v1.28.2
+    kube-proxy:
+      tag: v1.28.2
+    kube-scheduler:
+      tag: v1.28.2
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.3
+    kube-apiserver:
+      tag: v1.28.3
+    kube-controllermanager:
+      tag: v1.28.3
+    kube-proxy:
+      tag: v1.28.3
+    kube-scheduler:
+      tag: v1.28.3
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.4
+    kube-apiserver:
+      tag: v1.28.4
+    kube-controllermanager:
+      tag: v1.28.4
+    kube-proxy:
+      tag: v1.28.4
+    kube-scheduler:
+      tag: v1.28.4
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.5
+    kube-apiserver:
+      tag: v1.28.5
+    kube-controllermanager:
+      tag: v1.28.5
+    kube-proxy:
+      tag: v1.28.5
+    kube-scheduler:
+      tag: v1.28.5
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.9-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.6
+    kube-apiserver:
+      tag: v1.28.6
+    kube-controllermanager:
+      tag: v1.28.6
+    kube-proxy:
+      tag: v1.28.6
+    kube-scheduler:
+      tag: v1.28.6
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.7
+    kube-apiserver:
+      tag: v1.28.7
+    kube-controllermanager:
+      tag: v1.28.7
+    kube-proxy:
+      tag: v1.28.7
+    kube-scheduler:
+      tag: v1.28.7
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.8
+    kube-apiserver:
+      tag: v1.28.8
+    kube-controllermanager:
+      tag: v1.28.8
+    kube-proxy:
+      tag: v1.28.8
+    kube-scheduler:
+      tag: v1.28.8
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.9
+    kube-apiserver:
+      tag: v1.28.9
+    kube-controllermanager:
+      tag: v1.28.9
+    kube-proxy:
+      tag: v1.28.9
+    kube-scheduler:
+      tag: v1.28.9
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.28.10
+    kube-apiserver:
+      tag: v1.28.10
+    kube-controllermanager:
+      tag: v1.28.10
+    kube-proxy:
+      tag: v1.28.10
+    kube-scheduler:
+      tag: v1.28.10
+    coredns:
+      tag: v1.10.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.29.0
+    kube-apiserver:
+      tag: v1.29.0
+    kube-controllermanager:
+      tag: v1.29.0
+    kube-proxy:
+      tag: v1.29.0
+    kube-scheduler:
+      tag: v1.29.0
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.29.1
+    kube-apiserver:
+      tag: v1.29.1
+    kube-controllermanager:
+      tag: v1.29.1
+    kube-proxy:
+      tag: v1.29.1
+    kube-scheduler:
+      tag: v1.29.1
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.29.2
+    kube-apiserver:
+      tag: v1.29.2
+    kube-controllermanager:
+      tag: v1.29.2
+    kube-proxy:
+      tag: v1.29.2
+    kube-scheduler:
+      tag: v1.29.2
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.10-0
+    pause:
+      tag: 3.9
+
+  - version: v1.29.3
+    kube-apiserver:
+      tag: v1.29.3
+    kube-controllermanager:
+      tag: v1.29.3
+    kube-proxy:
+      tag: v1.29.3
+    kube-scheduler:
+      tag: v1.29.3
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.29.4
+    kube-apiserver:
+      tag: v1.29.4
+    kube-controllermanager:
+      tag: v1.29.4
+    kube-proxy:
+      tag: v1.29.4
+    kube-scheduler:
+      tag: v1.29.4
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.29.5
+    kube-apiserver:
+      tag: v1.29.5
+    kube-controllermanager:
+      tag: v1.29.5
+    kube-proxy:
+      tag: v1.29.5
+    kube-scheduler:
+      tag: v1.29.5
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.30.0
+    kube-apiserver:
+      tag: v1.30.0
+    kube-controllermanager:
+      tag: v1.30.0
+    kube-proxy:
+      tag: v1.30.0
+    kube-scheduler:
+      tag: v1.30.0
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
+  - version: v1.30.1
+    kube-apiserver:
+      tag: v1.30.1
+    kube-controllermanager:
+      tag: v1.30.1
+    kube-proxy:
+      tag: v1.30.1
+    kube-scheduler:
+      tag: v1.30.1
+    coredns:
+      tag: v1.11.1
+    etcd:
+      tag: 3.5.12-0
+    pause:
+      tag: 3.9
+
--- a/org/k8s/ingress-nginx-controller/Dockerfile.template
+++ b/org/k8s/ingress-nginx-controller/Dockerfile.template
@ -1,87 +0,0 @@
-# Copyright 2015 The Kubernetes Authors. All rights reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-FROM {{ registry }}{{ alt_image }}:{{ branch }}
-
-{{ install_pakages("nginx", "ingress-nginx", "ingress-nginx-data", "diffutils", "libcap-utils") }}
-
-RUN mv /etc/nginx/nginx.conf.sample /etc/nginx/nginx.conf
-
-ARG VERSION=v1.8.1
-ARG COMMIT_SHA=1b13845fd
-ARG BUILD_ID=UNSET
-
-LABEL org.opencontainers.image.title="NGINX Ingress Controller for Kubernetes"
-LABEL org.opencontainers.image.documentation="https://kubernetes.github.io/ingress-nginx/"
-LABEL org.opencontainers.image.source="https://github.com/kubernetes/ingress-nginx"
-LABEL org.opencontainers.image.vendor="The Kubernetes Authors"
-LABEL org.opencontainers.image.licenses="Apache-2.0"
-LABEL org.opencontainers.image.version="${VERSION}"
-LABEL org.opencontainers.image.revision="${COMMIT_SHA}"
-
-LABEL build_id="${BUILD_ID}"
-
-WORKDIR  /etc/nginx
-
-RUN /usr/sbin/groupadd -r -f www-data 2>/dev/null
-RUN /usr/sbin/useradd -g www-data -c 'www-data' -d /var/www -s '/sbin/nologin' -G www-data -r www-data 2>/dev/null
-
-RUN chown www-data:www-data -R /etc/nginx
-
-RUN mv /usr/bin/dbg /dbg \
-  && chown www-data:www-data /dbg
-RUN mv /usr/bin/nginx-ingress-controller /nginx-ingress-controller \
-  && chown www-data:www-data /nginx-ingress-controller
-RUN mv /usr/bin/wait-shutdown /wait-shutdown \
-  && chown www-data:www-data /wait-shutdown
-
-# Fix permission during the build to avoid issues at runtime
-# with volumes (custom templates)
-RUN bash -xeu -c ' \
-  writeDirs=( \
-    /etc/ingress-controller \
-    /etc/ingress-controller/ssl \
-    /etc/ingress-controller/auth \
-    /var/log \
-    /var/log/nginx \
-    /tmp/nginx \
-  ); \
-  for dir in "${writeDirs[@]}"; do \
-    mkdir -p ${dir}; \
-    chown -R www-data:www-data ${dir}; \
-  done' \
-  # LD_LIBRARY_PATH does not work so below is needed for  opentelemetry/other modules
-  # Put libs of newer modules under `/modules_mount/<other>/lib` and add that path below
-  # Could get complicated arch specific paths become a need
-  && echo "/lib:/usr/lib:/usr/local/lib:/modules_mount/etc/nginx/modules/otel" > /etc/ld-musl-x86_64.path
-
-
-RUN setcap    cap_net_bind_service=+ep /nginx-ingress-controller \
-  && setcap -v cap_net_bind_service=+ep /nginx-ingress-controller \
-  && setcap    cap_net_bind_service=+ep /usr/sbin/nginx \
-  && setcap -v cap_net_bind_service=+ep /usr/sbin/nginx \
-  #&& setcap    cap_net_bind_service=+ep /usr/bin/dumb-init \
-  #&& setcap -v cap_net_bind_service=+ep /usr/bin/dumb-init \
-  #&& apk del libcap \
-  && ln -sf /usr/sbin/nginx /usr/bin/nginx
-
-USER www-data
-
-# Create symlinks to redirect nginx logs to stdout and stderr docker log collector
-RUN  ln -sf /dev/stdout /var/log/nginx/access.log \
-  && ln -sf /dev/stderr /var/log/nginx/error.log
-
-#ENTRYPOINT ["/usr/bin/dumb-init", "--"]
-
-CMD ["/nginx-ingress-controller"]
--- a/org/k8s/kube-apiserver/Dockerfile.template
+++ b/org/k8s/kube-apiserver/Dockerfile.template
@ -2,6 +2,12 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages("kubernetes-master") }}
+LABEL org.opencontainers.image.title="kube-apiserver"
+LABEL org.opencontainers.image.description="The Kubernetes API server validates and configures data for the api objects which include pods, services, replicationcontrollers, and others."
+LABEL org.opencontainers.image.source="https://github.com/kubernetes/kubernetes"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("kubernetes-master") }}

 ENTRYPOINT ["/usr/bin/kube-apiserver"]
--- a/org/k8s/kube-apiserver/image.yaml
+++ b/org/k8s/kube-apiserver/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: kube-apiserver --version
+maintainers: []
--- a/org/k8s/kube-apiserver/test.yaml
+++ b/org/k8s/kube-apiserver/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "kube-apiserver --version"
--- a/org/k8s/kube-controller-manager/Dockerfile.template
+++ b/org/k8s/kube-controller-manager/Dockerfile.template
@ -2,6 +2,12 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages("kubernetes-master") }}
+LABEL org.opencontainers.image.title="kube-controller-manager"
+LABEL org.opencontainers.image.description="The Kubernetes controller manager is a daemon that embeds the core control loops shipped with Kubernetes."
+LABEL org.opencontainers.image.source="https://github.com/kubernetes/kubernetes"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("kubernetes-master") }}

 ENTRYPOINT ["/usr/bin/kube-controller-manager"]
--- a/org/k8s/kube-controller-manager/image.yaml
+++ b/org/k8s/kube-controller-manager/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: kube-controller-manager --version
+maintainers: []
--- a/org/k8s/kube-controller-manager/test.yaml
+++ b/org/k8s/kube-controller-manager/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "kube-controller-manager --version"
--- a/org/k8s/kube-proxy/Dockerfile.template
+++ b/org/k8s/kube-proxy/Dockerfile.template
@ -2,7 +2,13 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages("kubernetes-node") }}
+LABEL org.opencontainers.image.title="kube-proxy"
+LABEL org.opencontainers.image.description="The Kubernetes network proxy runs on each node."
+LABEL org.opencontainers.image.source="https://github.com/kubernetes/kubernetes"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("kubernetes-node") }}

 RUN ln -s /usr/bin/kube-proxy /usr/local/bin/kube-proxy

--- a/org/k8s/kube-proxy/image.yaml
+++ b/org/k8s/kube-proxy/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: kube-proxy --version
+maintainers: []
--- a/org/k8s/kube-proxy/test.yaml
+++ b/org/k8s/kube-proxy/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "kube-proxy --version"
--- a/org/k8s/kube-scheduler/Dockerfile.template
+++ b/org/k8s/kube-scheduler/Dockerfile.template
@ -2,6 +2,12 @@ FROM {{ registry }}{{ alt_image }}:{{ branch }}

 MAINTAINER alt-cloud

-{{ install_pakages("kubernetes-master") }}
+LABEL org.opencontainers.image.title="kube-scheduler"
+LABEL org.opencontainers.image.description="The Kubernetes scheduler is a control plane process which assigns Pods to Nodes."
+LABEL org.opencontainers.image.source="https://github.com/kubernetes/kubernetes"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.vendor="ALT Linux Team"
+
+{{ install_packages("kubernetes-master") }}

 ENTRYPOINT ["/usr/bin/kube-scheduler"]
--- a/org/k8s/kube-scheduler/image.yaml
+++ b/org/k8s/kube-scheduler/image.yaml
@ -0,0 +1,6 @@
+version: '1.0'
+kind: image
+test:
+  entrypoint: /bin/sh
+  command: kube-scheduler --version
+maintainers: []
--- a/org/k8s/kube-scheduler/test.yaml
+++ b/org/k8s/kube-scheduler/test.yaml
@ -0,0 +1,2 @@
+entrypoint: "/bin/sh"
+command: "kube-scheduler --version"
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Alexey Kostarev	64020acdd0	element maintainers added to image.yaml's	2024-05-22 17:51:23 +05:00
Alexey Kostarev	7156bc7ff5	Add files images.yaml for groups k8s, flannel, cert-manager, insert files test.yaml into images.yaml in builds directories	2024-05-22 17:29:10 +05:00
Nadezhda Fedorova	9c460b363e	change branches p/c workflow for new struct	2024-05-21 17:51:25 +03:00
Nadezhda Fedorova	28c0fc03cf	change org struct, change type of tests	2024-05-21 17:39:54 +03:00
Nadezhda Fedorova	f8496320dd	delete arches ppc64le arm from building script	2024-05-08 18:20:50 +03:00
fl0pp5	8cdee0b278	feat: Add trivy	2024-05-08 17:08:59 +03:00
Nadezhda Fedorova	8cc6581c18	fix systemd's label	2024-05-08 09:27:55 +03:00
Alexander Stepchenko	4bef9210e6	docs: fix distroless-builder description	2024-05-03 13:05:11 +03:00
Alexander Stepchenko	6944bb7158	feat: add labels to the k8s/kube-* images	2024-05-02 12:01:46 +03:00
Alexander Stepchenko	e60d4a6450	refactor: make help message more readable	2024-05-01 18:50:33 +03:00
Alexander Stepchenko	d31ae53893	fix: correct help message for -i/--images option	2024-05-01 18:49:45 +03:00
Alexander Stepchenko	d3a5f23958	feat: add zot Dockerfile.template and test	2024-04-26 16:29:36 +03:00
Alexander Stepchenko	f55f03f91d	refactor: fix typo in install_pakage	2024-04-26 12:34:41 +03:00
Nadezhda Fedorova	fa20517058	add repo to /etc/host for building c10f2	2024-04-25 11:15:52 +03:00
Nadezhda Fedorova	ad9a468aa6	update tags for k8s	2024-04-23 17:43:14 +03:00
Nadezhda Fedorova	86fba1814f	fix getting number of tech.issue for notifications to static number 1 (filter on tag doesn't work)	2024-04-23 13:35:41 +03:00
Nadezhda Fedorova	28b280556b	delete from workflow building images on c10f1/2 for arches arm, ppc	2024-04-23 13:09:37 +03:00
Nadezhda Fedorova	deee1706de	add workflow for building all images on branches p10, c10f1/2	2024-04-22 17:24:17 +03:00
Nadezhda Fedorova	a59901c4bf	add branches c10f1,c10f2 to list of options	2024-04-22 17:17:14 +03:00
Nadezhda Fedorova	5d6c3dcf3f	update tags for k8s	2024-04-19 18:13:06 +03:00
Nadezhda Fedorova	1aa473607c	add labels to dockerfiles	2024-04-19 15:51:44 +03:00
Nadezhda Fedorova	fcffc17ea0	add workflow for building all images on sisyphus	2024-04-19 15:12:54 +03:00
Nadezhda Fedorova	81f61b4857	change default registry to gitea	2024-04-18 13:18:44 +03:00
Nadezhda Fedorova	48de446739	add tests for images alt, k8s	2024-04-18 13:17:59 +03:00
				`@ -0,0 +1 @@`
				`man --version && ip -V && vim --version \| grep vim`