diff --git a/catalog/copy-images.sh b/catalog/copy-images.sh index af15c1b70..fed1bacd6 100755 --- a/catalog/copy-images.sh +++ b/catalog/copy-images.sh @@ -35,6 +35,13 @@ mv /tmp/crane . CMD="./crane" +$CMD cp --allow-nondistributable-artifacts --insecure bitnami/kubectl:1.28.5 $IMAGE_REGISTRY/bitnami/kubectl:1.28.5 +$CMD cp --allow-nondistributable-artifacts --insecure busybox:1.35 $IMAGE_REGISTRY/busybox:1.35 +$CMD cp --allow-nondistributable-artifacts --insecure curlimages/curl:7.83.1 $IMAGE_REGISTRY/curlimages/curl:7.83.1 +$CMD cp --allow-nondistributable-artifacts --insecure docker.io/bitnami/sealed-secrets-controller:0.25.0 $IMAGE_REGISTRY/bitnami/sealed-secrets-controller:0.25.0 +$CMD cp --allow-nondistributable-artifacts --insecure docker.io/falcosecurity/falco-no-driver:0.37.0 $IMAGE_REGISTRY/falcosecurity/falco-no-driver:0.37.0 +$CMD cp --allow-nondistributable-artifacts --insecure docker.io/falcosecurity/falcoctl:0.7.1 $IMAGE_REGISTRY/falcosecurity/falcoctl:0.7.1 +$CMD cp --allow-nondistributable-artifacts --insecure gcr.io/k8s-staging-test-infra/kubekins-e2e:v20230727-ea685f8747-master $IMAGE_REGISTRY/k8s-staging-test-infra/kubekins-e2e:v20230727-ea685f8747-master $CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/ace-installer:v2026.7.10 $IMAGE_REGISTRY/appscode-charts/ace-installer:v2026.7.10 $CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/ace:v2026.7.10 $IMAGE_REGISTRY/appscode-charts/ace:v2026.7.10 $CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/aceshifter:v2026.7.10 $IMAGE_REGISTRY/appscode-charts/aceshifter:v2026.7.10 @@ -320,3 +327,75 @@ $CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/va $CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/virtual-secrets-server:v2026.2.27 $IMAGE_REGISTRY/appscode-charts/virtual-secrets-server:v2026.2.27 $CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/voyager-gateway:v2026.1.15 $IMAGE_REGISTRY/appscode-charts/voyager-gateway:v2026.1.15 $CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/voyager:v2026.3.23 $IMAGE_REGISTRY/appscode-charts/voyager:v2026.3.23 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-acmesolver:v1.19.3 $IMAGE_REGISTRY/appscode-images/cert-manager-acmesolver:v1.19.3 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-cainjector:v1.19.3 $IMAGE_REGISTRY/appscode-images/cert-manager-cainjector:v1.19.3 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-controller:v1.19.3 $IMAGE_REGISTRY/appscode-images/cert-manager-controller:v1.19.3 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-startupapicheck:v1.19.3 $IMAGE_REGISTRY/appscode-images/cert-manager-startupapicheck:v1.19.3 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-webhook:v1.19.3 $IMAGE_REGISTRY/appscode-images/cert-manager-webhook:v1.19.3 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/aws-credential-manager:v0.0.3 $IMAGE_REGISTRY/appscode/aws-credential-manager:v0.0.3 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/azure-credential-manager:v0.1.0 $IMAGE_REGISTRY/appscode/azure-credential-manager:v0.1.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4 $IMAGE_REGISTRY/appscode/capa-vpc-peering-operator:v0.0.4 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/capi-ops-manager:v0.0.5 $IMAGE_REGISTRY/appscode/capi-ops-manager:v0.0.5 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/flux-cli:v2.7.2 $IMAGE_REGISTRY/appscode/flux-cli:v2.7.2 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/gcp-credential-manager:v0.1.0 $IMAGE_REGISTRY/appscode/gcp-credential-manager:v0.1.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/kube-rbac-proxy:v0.11.0 $IMAGE_REGISTRY/appscode/kube-rbac-proxy:v0.11.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/appscode/kube-rbac-proxy:v0.15.0 $IMAGE_REGISTRY/appscode/kube-rbac-proxy:v0.15.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/external-secrets/external-secrets:v0.9.12 $IMAGE_REGISTRY/external-secrets/external-secrets:v0.9.12 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/fluxcd/helm-controller:v1.4.2 $IMAGE_REGISTRY/fluxcd/helm-controller:v1.4.2 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/fluxcd/source-controller:v1.7.2 $IMAGE_REGISTRY/fluxcd/source-controller:v1.7.2 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/http-add-on-interceptor:0.12.0 $IMAGE_REGISTRY/kedacore/http-add-on-interceptor:0.12.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/http-add-on-operator:0.12.0 $IMAGE_REGISTRY/kedacore/http-add-on-operator:0.12.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/http-add-on-scaler:0.12.0 $IMAGE_REGISTRY/kedacore/http-add-on-scaler:0.12.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/keda-admission-webhooks:2.19.0 $IMAGE_REGISTRY/kedacore/keda-admission-webhooks:2.19.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/keda-metrics-apiserver:2.19.0 $IMAGE_REGISTRY/kedacore/keda-metrics-apiserver:2.19.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/keda:2.19.0 $IMAGE_REGISTRY/kedacore/keda:2.19.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kubedb/crossplane:v1.14.0 $IMAGE_REGISTRY/kubedb/crossplane:v1.14.0 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/background-controller:v1.12.5 $IMAGE_REGISTRY/kyverno/background-controller:v1.12.5 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/cleanup-controller:v1.12.5 $IMAGE_REGISTRY/kyverno/cleanup-controller:v1.12.5 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/kyverno-cli:v1.12.5 $IMAGE_REGISTRY/kyverno/kyverno-cli:v1.12.5 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/kyverno:v1.12.5 $IMAGE_REGISTRY/kyverno/kyverno:v1.12.5 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/kyvernopre:v1.12.5 $IMAGE_REGISTRY/kyverno/kyvernopre:v1.12.5 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/reports-controller:v1.12.5 $IMAGE_REGISTRY/kyverno/reports-controller:v1.12.5 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/stakater/reloader:v1.4.14 $IMAGE_REGISTRY/stakater/reloader:v1.4.14 +$CMD cp --allow-nondistributable-artifacts --insecure ghcr.io/topolvm/topolvm-with-sidecar:0.30.0 $IMAGE_REGISTRY/topolvm/topolvm-with-sidecar:0.30.0 +$CMD cp --allow-nondistributable-artifacts --insecure hashicorp/vault-csi-provider:1.4.1 $IMAGE_REGISTRY/hashicorp/vault-csi-provider:1.4.1 +$CMD cp --allow-nondistributable-artifacts --insecure hashicorp/vault-secrets-operator:0.4.3 $IMAGE_REGISTRY/hashicorp/vault-secrets-operator:0.4.3 +$CMD cp --allow-nondistributable-artifacts --insecure hashicorp/vault:1.15.2 $IMAGE_REGISTRY/hashicorp/vault:1.15.2 +$CMD cp --allow-nondistributable-artifacts --insecure longhornio/longhorn-manager:v1.7.2 $IMAGE_REGISTRY/longhornio/longhorn-manager:v1.7.2 +$CMD cp --allow-nondistributable-artifacts --insecure longhornio/longhorn-share-manager:v1.7.2 $IMAGE_REGISTRY/longhornio/longhorn-share-manager:v1.7.2 +$CMD cp --allow-nondistributable-artifacts --insecure longhornio/longhorn-ui:v1.7.2 $IMAGE_REGISTRY/longhornio/longhorn-ui:v1.7.2 +$CMD cp --allow-nondistributable-artifacts --insecure mcr.microsoft.com/oss/azure/secrets-store/provider-azure:v1.5.1 $IMAGE_REGISTRY/oss/azure/secrets-store/provider-azure:v1.5.1 +$CMD cp --allow-nondistributable-artifacts --insecure openpolicyagent/gatekeeper-crds:v3.13.3 $IMAGE_REGISTRY/openpolicyagent/gatekeeper-crds:v3.13.3 +$CMD cp --allow-nondistributable-artifacts --insecure openpolicyagent/gatekeeper:v3.13.3 $IMAGE_REGISTRY/openpolicyagent/gatekeeper:v3.13.3 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-58-g4ddce6a-2024.01.31.21.42 $IMAGE_REGISTRY/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-58-g4ddce6a-2024.01.31.21.42 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.23.0 $IMAGE_REGISTRY/ebs-csi-driver/aws-ebs-csi-driver:v1.23.0 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.3.0-eks-1-28-4 $IMAGE_REGISTRY/eks-distro/kubernetes-csi/external-attacher:v4.3.0-eks-1-28-4 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.5.0-eks-1-28-4 $IMAGE_REGISTRY/eks-distro/kubernetes-csi/external-provisioner:v3.5.0-eks-1-28-4 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.8.0-eks-1-28-4 $IMAGE_REGISTRY/eks-distro/kubernetes-csi/external-resizer:v1.8.0-eks-1-28-4 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.10.0-eks-1-28-4 $IMAGE_REGISTRY/eks-distro/kubernetes-csi/livenessprobe:v2.10.0-eks-1-28-4 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.8.0-eks-1-28-4 $IMAGE_REGISTRY/eks-distro/kubernetes-csi/node-driver-registrar:v2.8.0-eks-1-28-4 +$CMD cp --allow-nondistributable-artifacts --insecure public.ecr.aws/eks/aws-load-balancer-controller:v2.11.0 $IMAGE_REGISTRY/eks/aws-load-balancer-controller:v2.11.0 +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/kubecost1/kubecost-cost-model:latest $IMAGE_REGISTRY/kubecost1/kubecost-cost-model:latest +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/kubecost1/opencost-ui:prod-1.105.2 $IMAGE_REGISTRY/kubecost1/opencost-ui:prod-1.105.2 +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/prometheus-operator/prometheus-config-reloader:v0.80.0 $IMAGE_REGISTRY/prometheus-operator/prometheus-config-reloader:v0.80.0 +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/prometheus-operator/prometheus-operator:v0.80.0 $IMAGE_REGISTRY/prometheus-operator/prometheus-operator:v0.80.0 +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/prometheus/alertmanager:v0.28.0 $IMAGE_REGISTRY/prometheus/alertmanager:v0.28.0 +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/prometheus/node-exporter:v1.8.2 $IMAGE_REGISTRY/prometheus/node-exporter:v1.8.2 +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/prometheus/prometheus:v3.1.0 $IMAGE_REGISTRY/prometheus/prometheus:v3.1.0 +$CMD cp --allow-nondistributable-artifacts --insecure quay.io/thanos/thanos:v0.37.2 $IMAGE_REGISTRY/thanos/thanos:v0.37.2 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/autoscaling/cluster-autoscaler:v1.27.1 $IMAGE_REGISTRY/autoscaling/cluster-autoscaler:v1.27.1 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/csi-secrets-store/driver-crds:v1.4.1 $IMAGE_REGISTRY/csi-secrets-store/driver-crds:v1.4.1 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/csi-secrets-store/driver:v1.4.1 $IMAGE_REGISTRY/csi-secrets-store/driver:v1.4.1 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.1 $IMAGE_REGISTRY/ingress-nginx/kube-webhook-certgen:v1.5.1 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.0 $IMAGE_REGISTRY/kube-state-metrics/kube-state-metrics:v2.14.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/metrics-server/metrics-server:v0.6.4 $IMAGE_REGISTRY/metrics-server/metrics-server:v0.6.4 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.2 $IMAGE_REGISTRY/prometheus-adapter/prometheus-adapter:v0.11.2 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.0 $IMAGE_REGISTRY/sig-storage/csi-node-driver-registrar:v2.10.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0 $IMAGE_REGISTRY/sig-storage/csi-node-driver-registrar:v2.8.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-provisioner:v4.0.0 $IMAGE_REGISTRY/sig-storage/csi-provisioner:v4.0.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-snapshotter:v6.3.3 $IMAGE_REGISTRY/sig-storage/csi-snapshotter:v6.3.3 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/livenessprobe:v2.10.0 $IMAGE_REGISTRY/sig-storage/livenessprobe:v2.10.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/livenessprobe:v2.12.0 $IMAGE_REGISTRY/sig-storage/livenessprobe:v2.12.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/nfsplugin:v4.7.0 $IMAGE_REGISTRY/sig-storage/nfsplugin:v4.7.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/snapshot-controller:v8.1.0 $IMAGE_REGISTRY/sig-storage/snapshot-controller:v8.1.0 +$CMD cp --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0 $IMAGE_REGISTRY/sig-storage/snapshot-validation-webhook:v8.1.0 diff --git a/catalog/export-images.sh b/catalog/export-images.sh index 9fd18450a..8efaf7498 100755 --- a/catalog/export-images.sh +++ b/catalog/export-images.sh @@ -32,6 +32,13 @@ mv /tmp/crane images CMD="./images/crane" +$CMD pull --allow-nondistributable-artifacts --insecure bitnami/kubectl:1.28.5 images/bitnami-kubectl-1.28.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure busybox:1.35 images/library-busybox-1.35.tar +$CMD pull --allow-nondistributable-artifacts --insecure curlimages/curl:7.83.1 images/curlimages-curl-7.83.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure docker.io/bitnami/sealed-secrets-controller:0.25.0 images/bitnami-sealed-secrets-controller-0.25.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure docker.io/falcosecurity/falco-no-driver:0.37.0 images/falcosecurity-falco-no-driver-0.37.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure docker.io/falcosecurity/falcoctl:0.7.1 images/falcosecurity-falcoctl-0.7.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure gcr.io/k8s-staging-test-infra/kubekins-e2e:v20230727-ea685f8747-master images/k8s-staging-test-infra-kubekins-e2e-v20230727-ea685f8747-master.tar $CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/ace-installer:v2026.7.10 images/appscode-charts-ace-installer-v2026.7.10.tar $CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/ace:v2026.7.10 images/appscode-charts-ace-v2026.7.10.tar $CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/aceshifter:v2026.7.10 images/appscode-charts-aceshifter-v2026.7.10.tar @@ -317,5 +324,77 @@ $CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/ $CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/virtual-secrets-server:v2026.2.27 images/appscode-charts-virtual-secrets-server-v2026.2.27.tar $CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/voyager-gateway:v2026.1.15 images/appscode-charts-voyager-gateway-v2026.1.15.tar $CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-charts/voyager:v2026.3.23 images/appscode-charts-voyager-v2026.3.23.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-acmesolver:v1.19.3 images/appscode-images-cert-manager-acmesolver-v1.19.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-cainjector:v1.19.3 images/appscode-images-cert-manager-cainjector-v1.19.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-controller:v1.19.3 images/appscode-images-cert-manager-controller-v1.19.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-startupapicheck:v1.19.3 images/appscode-images-cert-manager-startupapicheck-v1.19.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode-images/cert-manager-webhook:v1.19.3 images/appscode-images-cert-manager-webhook-v1.19.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/aws-credential-manager:v0.0.3 images/appscode-aws-credential-manager-v0.0.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/azure-credential-manager:v0.1.0 images/appscode-azure-credential-manager-v0.1.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4 images/appscode-capa-vpc-peering-operator-v0.0.4.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/capi-ops-manager:v0.0.5 images/appscode-capi-ops-manager-v0.0.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/flux-cli:v2.7.2 images/appscode-flux-cli-v2.7.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/gcp-credential-manager:v0.1.0 images/appscode-gcp-credential-manager-v0.1.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/kube-rbac-proxy:v0.11.0 images/appscode-kube-rbac-proxy-v0.11.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/appscode/kube-rbac-proxy:v0.15.0 images/appscode-kube-rbac-proxy-v0.15.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/external-secrets/external-secrets:v0.9.12 images/external-secrets-external-secrets-v0.9.12.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/fluxcd/helm-controller:v1.4.2 images/fluxcd-helm-controller-v1.4.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/fluxcd/source-controller:v1.7.2 images/fluxcd-source-controller-v1.7.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/http-add-on-interceptor:0.12.0 images/kedacore-http-add-on-interceptor-0.12.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/http-add-on-operator:0.12.0 images/kedacore-http-add-on-operator-0.12.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/http-add-on-scaler:0.12.0 images/kedacore-http-add-on-scaler-0.12.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/keda-admission-webhooks:2.19.0 images/kedacore-keda-admission-webhooks-2.19.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/keda-metrics-apiserver:2.19.0 images/kedacore-keda-metrics-apiserver-2.19.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kedacore/keda:2.19.0 images/kedacore-keda-2.19.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kubedb/crossplane:v1.14.0 images/kubedb-crossplane-v1.14.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/background-controller:v1.12.5 images/kyverno-background-controller-v1.12.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/cleanup-controller:v1.12.5 images/kyverno-cleanup-controller-v1.12.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/kyverno-cli:v1.12.5 images/kyverno-kyverno-cli-v1.12.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/kyverno:v1.12.5 images/kyverno-kyverno-v1.12.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/kyvernopre:v1.12.5 images/kyverno-kyvernopre-v1.12.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/kyverno/reports-controller:v1.12.5 images/kyverno-reports-controller-v1.12.5.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/stakater/reloader:v1.4.14 images/stakater-reloader-v1.4.14.tar +$CMD pull --allow-nondistributable-artifacts --insecure ghcr.io/topolvm/topolvm-with-sidecar:0.30.0 images/topolvm-topolvm-with-sidecar-0.30.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure hashicorp/vault-csi-provider:1.4.1 images/hashicorp-vault-csi-provider-1.4.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure hashicorp/vault-secrets-operator:0.4.3 images/hashicorp-vault-secrets-operator-0.4.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure hashicorp/vault:1.15.2 images/hashicorp-vault-1.15.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure longhornio/longhorn-manager:v1.7.2 images/longhornio-longhorn-manager-v1.7.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure longhornio/longhorn-share-manager:v1.7.2 images/longhornio-longhorn-share-manager-v1.7.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure longhornio/longhorn-ui:v1.7.2 images/longhornio-longhorn-ui-v1.7.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure mcr.microsoft.com/oss/azure/secrets-store/provider-azure:v1.5.1 images/oss-azure-secrets-store-provider-azure-v1.5.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure openpolicyagent/gatekeeper-crds:v3.13.3 images/openpolicyagent-gatekeeper-crds-v3.13.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure openpolicyagent/gatekeeper:v3.13.3 images/openpolicyagent-gatekeeper-v3.13.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-58-g4ddce6a-2024.01.31.21.42 images/aws-secrets-manager-secrets-store-csi-driver-provider-aws-1.0.r2-58-g4ddce6a-2024.01.31.21.42.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.23.0 images/ebs-csi-driver-aws-ebs-csi-driver-v1.23.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.3.0-eks-1-28-4 images/eks-distro-kubernetes-csi-external-attacher-v4.3.0-eks-1-28-4.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.5.0-eks-1-28-4 images/eks-distro-kubernetes-csi-external-provisioner-v3.5.0-eks-1-28-4.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.8.0-eks-1-28-4 images/eks-distro-kubernetes-csi-external-resizer-v1.8.0-eks-1-28-4.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.10.0-eks-1-28-4 images/eks-distro-kubernetes-csi-livenessprobe-v2.10.0-eks-1-28-4.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.8.0-eks-1-28-4 images/eks-distro-kubernetes-csi-node-driver-registrar-v2.8.0-eks-1-28-4.tar +$CMD pull --allow-nondistributable-artifacts --insecure public.ecr.aws/eks/aws-load-balancer-controller:v2.11.0 images/eks-aws-load-balancer-controller-v2.11.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/kubecost1/kubecost-cost-model:latest images/kubecost1-kubecost-cost-model-latest.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/kubecost1/opencost-ui:prod-1.105.2 images/kubecost1-opencost-ui-prod-1.105.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/prometheus-operator/prometheus-config-reloader:v0.80.0 images/prometheus-operator-prometheus-config-reloader-v0.80.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/prometheus-operator/prometheus-operator:v0.80.0 images/prometheus-operator-prometheus-operator-v0.80.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/prometheus/alertmanager:v0.28.0 images/prometheus-alertmanager-v0.28.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/prometheus/node-exporter:v1.8.2 images/prometheus-node-exporter-v1.8.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/prometheus/prometheus:v3.1.0 images/prometheus-prometheus-v3.1.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure quay.io/thanos/thanos:v0.37.2 images/thanos-thanos-v0.37.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/autoscaling/cluster-autoscaler:v1.27.1 images/autoscaling-cluster-autoscaler-v1.27.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/csi-secrets-store/driver-crds:v1.4.1 images/csi-secrets-store-driver-crds-v1.4.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/csi-secrets-store/driver:v1.4.1 images/csi-secrets-store-driver-v1.4.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.1 images/ingress-nginx-kube-webhook-certgen-v1.5.1.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.0 images/kube-state-metrics-kube-state-metrics-v2.14.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/metrics-server/metrics-server:v0.6.4 images/metrics-server-metrics-server-v0.6.4.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.2 images/prometheus-adapter-prometheus-adapter-v0.11.2.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.0 images/sig-storage-csi-node-driver-registrar-v2.10.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0 images/sig-storage-csi-node-driver-registrar-v2.8.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-provisioner:v4.0.0 images/sig-storage-csi-provisioner-v4.0.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/csi-snapshotter:v6.3.3 images/sig-storage-csi-snapshotter-v6.3.3.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/livenessprobe:v2.10.0 images/sig-storage-livenessprobe-v2.10.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/livenessprobe:v2.12.0 images/sig-storage-livenessprobe-v2.12.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/nfsplugin:v4.7.0 images/sig-storage-nfsplugin-v4.7.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/snapshot-controller:v8.1.0 images/sig-storage-snapshot-controller-v8.1.0.tar +$CMD pull --allow-nondistributable-artifacts --insecure registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0 images/sig-storage-snapshot-validation-webhook-v8.1.0.tar tar -czvf images.tar.gz images diff --git a/catalog/feature-chart-images.yaml b/catalog/feature-chart-images.yaml new file mode 100644 index 000000000..bfb9065f8 --- /dev/null +++ b/catalog/feature-chart-images.yaml @@ -0,0 +1,79 @@ +- bitnami/kubectl:1.28.5 +- busybox:1.35 +- curlimages/curl:7.83.1 +- docker.io/bitnami/sealed-secrets-controller:0.25.0 +- docker.io/falcosecurity/falco-no-driver:0.37.0 +- docker.io/falcosecurity/falcoctl:0.7.1 +- gcr.io/k8s-staging-test-infra/kubekins-e2e:v20230727-ea685f8747-master +- ghcr.io/appscode-images/cert-manager-acmesolver:v1.19.3 +- ghcr.io/appscode-images/cert-manager-cainjector:v1.19.3 +- ghcr.io/appscode-images/cert-manager-controller:v1.19.3 +- ghcr.io/appscode-images/cert-manager-startupapicheck:v1.19.3 +- ghcr.io/appscode-images/cert-manager-webhook:v1.19.3 +- ghcr.io/appscode/aws-credential-manager:v0.0.3 +- ghcr.io/appscode/azure-credential-manager:v0.1.0 +- ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4 +- ghcr.io/appscode/capi-ops-manager:v0.0.5 +- ghcr.io/appscode/flux-cli:v2.7.2 +- ghcr.io/appscode/gcp-credential-manager:v0.1.0 +- ghcr.io/appscode/kube-rbac-proxy:v0.11.0 +- ghcr.io/appscode/kube-rbac-proxy:v0.15.0 +- ghcr.io/external-secrets/external-secrets:v0.9.12 +- ghcr.io/fluxcd/helm-controller:v1.4.2 +- ghcr.io/fluxcd/source-controller:v1.7.2 +- ghcr.io/kedacore/http-add-on-interceptor:0.12.0 +- ghcr.io/kedacore/http-add-on-operator:0.12.0 +- ghcr.io/kedacore/http-add-on-scaler:0.12.0 +- ghcr.io/kedacore/keda-admission-webhooks:2.19.0 +- ghcr.io/kedacore/keda-metrics-apiserver:2.19.0 +- ghcr.io/kedacore/keda:2.19.0 +- ghcr.io/kubedb/crossplane:v1.14.0 +- ghcr.io/kyverno/background-controller:v1.12.5 +- ghcr.io/kyverno/cleanup-controller:v1.12.5 +- ghcr.io/kyverno/kyverno-cli:v1.12.5 +- ghcr.io/kyverno/kyverno:v1.12.5 +- ghcr.io/kyverno/kyvernopre:v1.12.5 +- ghcr.io/kyverno/reports-controller:v1.12.5 +- ghcr.io/stakater/reloader:v1.4.14 +- ghcr.io/topolvm/topolvm-with-sidecar:0.30.0 +- hashicorp/vault-csi-provider:1.4.1 +- hashicorp/vault-secrets-operator:0.4.3 +- hashicorp/vault:1.15.2 +- longhornio/longhorn-manager:v1.7.2 +- longhornio/longhorn-share-manager:v1.7.2 +- longhornio/longhorn-ui:v1.7.2 +- mcr.microsoft.com/oss/azure/secrets-store/provider-azure:v1.5.1 +- openpolicyagent/gatekeeper-crds:v3.13.3 +- openpolicyagent/gatekeeper:v3.13.3 +- public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-58-g4ddce6a-2024.01.31.21.42 +- public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.23.0 +- public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.3.0-eks-1-28-4 +- public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.5.0-eks-1-28-4 +- public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.8.0-eks-1-28-4 +- public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.10.0-eks-1-28-4 +- public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.8.0-eks-1-28-4 +- public.ecr.aws/eks/aws-load-balancer-controller:v2.11.0 +- quay.io/kubecost1/kubecost-cost-model:latest +- quay.io/kubecost1/opencost-ui:prod-1.105.2 +- quay.io/prometheus-operator/prometheus-config-reloader:v0.80.0 +- quay.io/prometheus-operator/prometheus-operator:v0.80.0 +- quay.io/prometheus/alertmanager:v0.28.0 +- quay.io/prometheus/node-exporter:v1.8.2 +- quay.io/prometheus/prometheus:v3.1.0 +- quay.io/thanos/thanos:v0.37.2 +- registry.k8s.io/autoscaling/cluster-autoscaler:v1.27.1 +- registry.k8s.io/csi-secrets-store/driver-crds:v1.4.1 +- registry.k8s.io/csi-secrets-store/driver:v1.4.1 +- registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.1 +- registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.0 +- registry.k8s.io/metrics-server/metrics-server:v0.6.4 +- registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.2 +- registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.0 +- registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0 +- registry.k8s.io/sig-storage/csi-provisioner:v4.0.0 +- registry.k8s.io/sig-storage/csi-snapshotter:v6.3.3 +- registry.k8s.io/sig-storage/livenessprobe:v2.10.0 +- registry.k8s.io/sig-storage/livenessprobe:v2.12.0 +- registry.k8s.io/sig-storage/nfsplugin:v4.7.0 +- registry.k8s.io/sig-storage/snapshot-controller:v8.1.0 +- registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0 diff --git a/catalog/import-images.sh b/catalog/import-images.sh index debb21de4..114a7aed9 100755 --- a/catalog/import-images.sh +++ b/catalog/import-images.sh @@ -26,6 +26,13 @@ tar -zxvf $TARBALL CMD="./crane" +$CMD push --allow-nondistributable-artifacts --insecure images/bitnami-kubectl-1.28.5.tar $IMAGE_REGISTRY/bitnami/kubectl:1.28.5 +$CMD push --allow-nondistributable-artifacts --insecure images/library-busybox-1.35.tar $IMAGE_REGISTRY/busybox:1.35 +$CMD push --allow-nondistributable-artifacts --insecure images/curlimages-curl-7.83.1.tar $IMAGE_REGISTRY/curlimages/curl:7.83.1 +$CMD push --allow-nondistributable-artifacts --insecure images/bitnami-sealed-secrets-controller-0.25.0.tar $IMAGE_REGISTRY/bitnami/sealed-secrets-controller:0.25.0 +$CMD push --allow-nondistributable-artifacts --insecure images/falcosecurity-falco-no-driver-0.37.0.tar $IMAGE_REGISTRY/falcosecurity/falco-no-driver:0.37.0 +$CMD push --allow-nondistributable-artifacts --insecure images/falcosecurity-falcoctl-0.7.1.tar $IMAGE_REGISTRY/falcosecurity/falcoctl:0.7.1 +$CMD push --allow-nondistributable-artifacts --insecure images/k8s-staging-test-infra-kubekins-e2e-v20230727-ea685f8747-master.tar $IMAGE_REGISTRY/k8s-staging-test-infra/kubekins-e2e:v20230727-ea685f8747-master $CMD push --allow-nondistributable-artifacts --insecure images/appscode-charts-ace-installer-v2026.7.10.tar $IMAGE_REGISTRY/appscode-charts/ace-installer:v2026.7.10 $CMD push --allow-nondistributable-artifacts --insecure images/appscode-charts-ace-v2026.7.10.tar $IMAGE_REGISTRY/appscode-charts/ace:v2026.7.10 $CMD push --allow-nondistributable-artifacts --insecure images/appscode-charts-aceshifter-v2026.7.10.tar $IMAGE_REGISTRY/appscode-charts/aceshifter:v2026.7.10 @@ -311,3 +318,75 @@ $CMD push --allow-nondistributable-artifacts --insecure images/appscode-charts-v $CMD push --allow-nondistributable-artifacts --insecure images/appscode-charts-virtual-secrets-server-v2026.2.27.tar $IMAGE_REGISTRY/appscode-charts/virtual-secrets-server:v2026.2.27 $CMD push --allow-nondistributable-artifacts --insecure images/appscode-charts-voyager-gateway-v2026.1.15.tar $IMAGE_REGISTRY/appscode-charts/voyager-gateway:v2026.1.15 $CMD push --allow-nondistributable-artifacts --insecure images/appscode-charts-voyager-v2026.3.23.tar $IMAGE_REGISTRY/appscode-charts/voyager:v2026.3.23 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-images-cert-manager-acmesolver-v1.19.3.tar $IMAGE_REGISTRY/appscode-images/cert-manager-acmesolver:v1.19.3 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-images-cert-manager-cainjector-v1.19.3.tar $IMAGE_REGISTRY/appscode-images/cert-manager-cainjector:v1.19.3 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-images-cert-manager-controller-v1.19.3.tar $IMAGE_REGISTRY/appscode-images/cert-manager-controller:v1.19.3 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-images-cert-manager-startupapicheck-v1.19.3.tar $IMAGE_REGISTRY/appscode-images/cert-manager-startupapicheck:v1.19.3 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-images-cert-manager-webhook-v1.19.3.tar $IMAGE_REGISTRY/appscode-images/cert-manager-webhook:v1.19.3 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-aws-credential-manager-v0.0.3.tar $IMAGE_REGISTRY/appscode/aws-credential-manager:v0.0.3 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-azure-credential-manager-v0.1.0.tar $IMAGE_REGISTRY/appscode/azure-credential-manager:v0.1.0 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-capa-vpc-peering-operator-v0.0.4.tar $IMAGE_REGISTRY/appscode/capa-vpc-peering-operator:v0.0.4 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-capi-ops-manager-v0.0.5.tar $IMAGE_REGISTRY/appscode/capi-ops-manager:v0.0.5 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-flux-cli-v2.7.2.tar $IMAGE_REGISTRY/appscode/flux-cli:v2.7.2 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-gcp-credential-manager-v0.1.0.tar $IMAGE_REGISTRY/appscode/gcp-credential-manager:v0.1.0 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-kube-rbac-proxy-v0.11.0.tar $IMAGE_REGISTRY/appscode/kube-rbac-proxy:v0.11.0 +$CMD push --allow-nondistributable-artifacts --insecure images/appscode-kube-rbac-proxy-v0.15.0.tar $IMAGE_REGISTRY/appscode/kube-rbac-proxy:v0.15.0 +$CMD push --allow-nondistributable-artifacts --insecure images/external-secrets-external-secrets-v0.9.12.tar $IMAGE_REGISTRY/external-secrets/external-secrets:v0.9.12 +$CMD push --allow-nondistributable-artifacts --insecure images/fluxcd-helm-controller-v1.4.2.tar $IMAGE_REGISTRY/fluxcd/helm-controller:v1.4.2 +$CMD push --allow-nondistributable-artifacts --insecure images/fluxcd-source-controller-v1.7.2.tar $IMAGE_REGISTRY/fluxcd/source-controller:v1.7.2 +$CMD push --allow-nondistributable-artifacts --insecure images/kedacore-http-add-on-interceptor-0.12.0.tar $IMAGE_REGISTRY/kedacore/http-add-on-interceptor:0.12.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kedacore-http-add-on-operator-0.12.0.tar $IMAGE_REGISTRY/kedacore/http-add-on-operator:0.12.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kedacore-http-add-on-scaler-0.12.0.tar $IMAGE_REGISTRY/kedacore/http-add-on-scaler:0.12.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kedacore-keda-admission-webhooks-2.19.0.tar $IMAGE_REGISTRY/kedacore/keda-admission-webhooks:2.19.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kedacore-keda-metrics-apiserver-2.19.0.tar $IMAGE_REGISTRY/kedacore/keda-metrics-apiserver:2.19.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kedacore-keda-2.19.0.tar $IMAGE_REGISTRY/kedacore/keda:2.19.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kubedb-crossplane-v1.14.0.tar $IMAGE_REGISTRY/kubedb/crossplane:v1.14.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kyverno-background-controller-v1.12.5.tar $IMAGE_REGISTRY/kyverno/background-controller:v1.12.5 +$CMD push --allow-nondistributable-artifacts --insecure images/kyverno-cleanup-controller-v1.12.5.tar $IMAGE_REGISTRY/kyverno/cleanup-controller:v1.12.5 +$CMD push --allow-nondistributable-artifacts --insecure images/kyverno-kyverno-cli-v1.12.5.tar $IMAGE_REGISTRY/kyverno/kyverno-cli:v1.12.5 +$CMD push --allow-nondistributable-artifacts --insecure images/kyverno-kyverno-v1.12.5.tar $IMAGE_REGISTRY/kyverno/kyverno:v1.12.5 +$CMD push --allow-nondistributable-artifacts --insecure images/kyverno-kyvernopre-v1.12.5.tar $IMAGE_REGISTRY/kyverno/kyvernopre:v1.12.5 +$CMD push --allow-nondistributable-artifacts --insecure images/kyverno-reports-controller-v1.12.5.tar $IMAGE_REGISTRY/kyverno/reports-controller:v1.12.5 +$CMD push --allow-nondistributable-artifacts --insecure images/stakater-reloader-v1.4.14.tar $IMAGE_REGISTRY/stakater/reloader:v1.4.14 +$CMD push --allow-nondistributable-artifacts --insecure images/topolvm-topolvm-with-sidecar-0.30.0.tar $IMAGE_REGISTRY/topolvm/topolvm-with-sidecar:0.30.0 +$CMD push --allow-nondistributable-artifacts --insecure images/hashicorp-vault-csi-provider-1.4.1.tar $IMAGE_REGISTRY/hashicorp/vault-csi-provider:1.4.1 +$CMD push --allow-nondistributable-artifacts --insecure images/hashicorp-vault-secrets-operator-0.4.3.tar $IMAGE_REGISTRY/hashicorp/vault-secrets-operator:0.4.3 +$CMD push --allow-nondistributable-artifacts --insecure images/hashicorp-vault-1.15.2.tar $IMAGE_REGISTRY/hashicorp/vault:1.15.2 +$CMD push --allow-nondistributable-artifacts --insecure images/longhornio-longhorn-manager-v1.7.2.tar $IMAGE_REGISTRY/longhornio/longhorn-manager:v1.7.2 +$CMD push --allow-nondistributable-artifacts --insecure images/longhornio-longhorn-share-manager-v1.7.2.tar $IMAGE_REGISTRY/longhornio/longhorn-share-manager:v1.7.2 +$CMD push --allow-nondistributable-artifacts --insecure images/longhornio-longhorn-ui-v1.7.2.tar $IMAGE_REGISTRY/longhornio/longhorn-ui:v1.7.2 +$CMD push --allow-nondistributable-artifacts --insecure images/oss-azure-secrets-store-provider-azure-v1.5.1.tar $IMAGE_REGISTRY/oss/azure/secrets-store/provider-azure:v1.5.1 +$CMD push --allow-nondistributable-artifacts --insecure images/openpolicyagent-gatekeeper-crds-v3.13.3.tar $IMAGE_REGISTRY/openpolicyagent/gatekeeper-crds:v3.13.3 +$CMD push --allow-nondistributable-artifacts --insecure images/openpolicyagent-gatekeeper-v3.13.3.tar $IMAGE_REGISTRY/openpolicyagent/gatekeeper:v3.13.3 +$CMD push --allow-nondistributable-artifacts --insecure images/aws-secrets-manager-secrets-store-csi-driver-provider-aws-1.0.r2-58-g4ddce6a-2024.01.31.21.42.tar $IMAGE_REGISTRY/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-58-g4ddce6a-2024.01.31.21.42 +$CMD push --allow-nondistributable-artifacts --insecure images/ebs-csi-driver-aws-ebs-csi-driver-v1.23.0.tar $IMAGE_REGISTRY/ebs-csi-driver/aws-ebs-csi-driver:v1.23.0 +$CMD push --allow-nondistributable-artifacts --insecure images/eks-distro-kubernetes-csi-external-attacher-v4.3.0-eks-1-28-4.tar $IMAGE_REGISTRY/eks-distro/kubernetes-csi/external-attacher:v4.3.0-eks-1-28-4 +$CMD push --allow-nondistributable-artifacts --insecure images/eks-distro-kubernetes-csi-external-provisioner-v3.5.0-eks-1-28-4.tar $IMAGE_REGISTRY/eks-distro/kubernetes-csi/external-provisioner:v3.5.0-eks-1-28-4 +$CMD push --allow-nondistributable-artifacts --insecure images/eks-distro-kubernetes-csi-external-resizer-v1.8.0-eks-1-28-4.tar $IMAGE_REGISTRY/eks-distro/kubernetes-csi/external-resizer:v1.8.0-eks-1-28-4 +$CMD push --allow-nondistributable-artifacts --insecure images/eks-distro-kubernetes-csi-livenessprobe-v2.10.0-eks-1-28-4.tar $IMAGE_REGISTRY/eks-distro/kubernetes-csi/livenessprobe:v2.10.0-eks-1-28-4 +$CMD push --allow-nondistributable-artifacts --insecure images/eks-distro-kubernetes-csi-node-driver-registrar-v2.8.0-eks-1-28-4.tar $IMAGE_REGISTRY/eks-distro/kubernetes-csi/node-driver-registrar:v2.8.0-eks-1-28-4 +$CMD push --allow-nondistributable-artifacts --insecure images/eks-aws-load-balancer-controller-v2.11.0.tar $IMAGE_REGISTRY/eks/aws-load-balancer-controller:v2.11.0 +$CMD push --allow-nondistributable-artifacts --insecure images/kubecost1-kubecost-cost-model-latest.tar $IMAGE_REGISTRY/kubecost1/kubecost-cost-model:latest +$CMD push --allow-nondistributable-artifacts --insecure images/kubecost1-opencost-ui-prod-1.105.2.tar $IMAGE_REGISTRY/kubecost1/opencost-ui:prod-1.105.2 +$CMD push --allow-nondistributable-artifacts --insecure images/prometheus-operator-prometheus-config-reloader-v0.80.0.tar $IMAGE_REGISTRY/prometheus-operator/prometheus-config-reloader:v0.80.0 +$CMD push --allow-nondistributable-artifacts --insecure images/prometheus-operator-prometheus-operator-v0.80.0.tar $IMAGE_REGISTRY/prometheus-operator/prometheus-operator:v0.80.0 +$CMD push --allow-nondistributable-artifacts --insecure images/prometheus-alertmanager-v0.28.0.tar $IMAGE_REGISTRY/prometheus/alertmanager:v0.28.0 +$CMD push --allow-nondistributable-artifacts --insecure images/prometheus-node-exporter-v1.8.2.tar $IMAGE_REGISTRY/prometheus/node-exporter:v1.8.2 +$CMD push --allow-nondistributable-artifacts --insecure images/prometheus-prometheus-v3.1.0.tar $IMAGE_REGISTRY/prometheus/prometheus:v3.1.0 +$CMD push --allow-nondistributable-artifacts --insecure images/thanos-thanos-v0.37.2.tar $IMAGE_REGISTRY/thanos/thanos:v0.37.2 +$CMD push --allow-nondistributable-artifacts --insecure images/autoscaling-cluster-autoscaler-v1.27.1.tar $IMAGE_REGISTRY/autoscaling/cluster-autoscaler:v1.27.1 +$CMD push --allow-nondistributable-artifacts --insecure images/csi-secrets-store-driver-crds-v1.4.1.tar $IMAGE_REGISTRY/csi-secrets-store/driver-crds:v1.4.1 +$CMD push --allow-nondistributable-artifacts --insecure images/csi-secrets-store-driver-v1.4.1.tar $IMAGE_REGISTRY/csi-secrets-store/driver:v1.4.1 +$CMD push --allow-nondistributable-artifacts --insecure images/ingress-nginx-kube-webhook-certgen-v1.5.1.tar $IMAGE_REGISTRY/ingress-nginx/kube-webhook-certgen:v1.5.1 +$CMD push --allow-nondistributable-artifacts --insecure images/kube-state-metrics-kube-state-metrics-v2.14.0.tar $IMAGE_REGISTRY/kube-state-metrics/kube-state-metrics:v2.14.0 +$CMD push --allow-nondistributable-artifacts --insecure images/metrics-server-metrics-server-v0.6.4.tar $IMAGE_REGISTRY/metrics-server/metrics-server:v0.6.4 +$CMD push --allow-nondistributable-artifacts --insecure images/prometheus-adapter-prometheus-adapter-v0.11.2.tar $IMAGE_REGISTRY/prometheus-adapter/prometheus-adapter:v0.11.2 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-csi-node-driver-registrar-v2.10.0.tar $IMAGE_REGISTRY/sig-storage/csi-node-driver-registrar:v2.10.0 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-csi-node-driver-registrar-v2.8.0.tar $IMAGE_REGISTRY/sig-storage/csi-node-driver-registrar:v2.8.0 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-csi-provisioner-v4.0.0.tar $IMAGE_REGISTRY/sig-storage/csi-provisioner:v4.0.0 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-csi-snapshotter-v6.3.3.tar $IMAGE_REGISTRY/sig-storage/csi-snapshotter:v6.3.3 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-livenessprobe-v2.10.0.tar $IMAGE_REGISTRY/sig-storage/livenessprobe:v2.10.0 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-livenessprobe-v2.12.0.tar $IMAGE_REGISTRY/sig-storage/livenessprobe:v2.12.0 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-nfsplugin-v4.7.0.tar $IMAGE_REGISTRY/sig-storage/nfsplugin:v4.7.0 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-snapshot-controller-v8.1.0.tar $IMAGE_REGISTRY/sig-storage/snapshot-controller:v8.1.0 +$CMD push --allow-nondistributable-artifacts --insecure images/sig-storage-snapshot-validation-webhook-v8.1.0.tar $IMAGE_REGISTRY/sig-storage/snapshot-validation-webhook:v8.1.0 diff --git a/catalog/import-into-k3s.sh b/catalog/import-into-k3s.sh index df3e4642f..375fff910 100755 --- a/catalog/import-into-k3s.sh +++ b/catalog/import-into-k3s.sh @@ -24,6 +24,13 @@ fi TARBALL=${1:-} tar -zxvf $TARBALL +k3s ctr images import images/bitnami-kubectl-1.28.5.tar +k3s ctr images import images/library-busybox-1.35.tar +k3s ctr images import images/curlimages-curl-7.83.1.tar +k3s ctr images import images/bitnami-sealed-secrets-controller-0.25.0.tar +k3s ctr images import images/falcosecurity-falco-no-driver-0.37.0.tar +k3s ctr images import images/falcosecurity-falcoctl-0.7.1.tar +k3s ctr images import images/k8s-staging-test-infra-kubekins-e2e-v20230727-ea685f8747-master.tar k3s ctr images import images/appscode-charts-ace-installer-v2026.7.10.tar k3s ctr images import images/appscode-charts-ace-v2026.7.10.tar k3s ctr images import images/appscode-charts-aceshifter-v2026.7.10.tar @@ -309,3 +316,75 @@ k3s ctr images import images/appscode-charts-vault-0.27.0.tar k3s ctr images import images/appscode-charts-virtual-secrets-server-v2026.2.27.tar k3s ctr images import images/appscode-charts-voyager-gateway-v2026.1.15.tar k3s ctr images import images/appscode-charts-voyager-v2026.3.23.tar +k3s ctr images import images/appscode-images-cert-manager-acmesolver-v1.19.3.tar +k3s ctr images import images/appscode-images-cert-manager-cainjector-v1.19.3.tar +k3s ctr images import images/appscode-images-cert-manager-controller-v1.19.3.tar +k3s ctr images import images/appscode-images-cert-manager-startupapicheck-v1.19.3.tar +k3s ctr images import images/appscode-images-cert-manager-webhook-v1.19.3.tar +k3s ctr images import images/appscode-aws-credential-manager-v0.0.3.tar +k3s ctr images import images/appscode-azure-credential-manager-v0.1.0.tar +k3s ctr images import images/appscode-capa-vpc-peering-operator-v0.0.4.tar +k3s ctr images import images/appscode-capi-ops-manager-v0.0.5.tar +k3s ctr images import images/appscode-flux-cli-v2.7.2.tar +k3s ctr images import images/appscode-gcp-credential-manager-v0.1.0.tar +k3s ctr images import images/appscode-kube-rbac-proxy-v0.11.0.tar +k3s ctr images import images/appscode-kube-rbac-proxy-v0.15.0.tar +k3s ctr images import images/external-secrets-external-secrets-v0.9.12.tar +k3s ctr images import images/fluxcd-helm-controller-v1.4.2.tar +k3s ctr images import images/fluxcd-source-controller-v1.7.2.tar +k3s ctr images import images/kedacore-http-add-on-interceptor-0.12.0.tar +k3s ctr images import images/kedacore-http-add-on-operator-0.12.0.tar +k3s ctr images import images/kedacore-http-add-on-scaler-0.12.0.tar +k3s ctr images import images/kedacore-keda-admission-webhooks-2.19.0.tar +k3s ctr images import images/kedacore-keda-metrics-apiserver-2.19.0.tar +k3s ctr images import images/kedacore-keda-2.19.0.tar +k3s ctr images import images/kubedb-crossplane-v1.14.0.tar +k3s ctr images import images/kyverno-background-controller-v1.12.5.tar +k3s ctr images import images/kyverno-cleanup-controller-v1.12.5.tar +k3s ctr images import images/kyverno-kyverno-cli-v1.12.5.tar +k3s ctr images import images/kyverno-kyverno-v1.12.5.tar +k3s ctr images import images/kyverno-kyvernopre-v1.12.5.tar +k3s ctr images import images/kyverno-reports-controller-v1.12.5.tar +k3s ctr images import images/stakater-reloader-v1.4.14.tar +k3s ctr images import images/topolvm-topolvm-with-sidecar-0.30.0.tar +k3s ctr images import images/hashicorp-vault-csi-provider-1.4.1.tar +k3s ctr images import images/hashicorp-vault-secrets-operator-0.4.3.tar +k3s ctr images import images/hashicorp-vault-1.15.2.tar +k3s ctr images import images/longhornio-longhorn-manager-v1.7.2.tar +k3s ctr images import images/longhornio-longhorn-share-manager-v1.7.2.tar +k3s ctr images import images/longhornio-longhorn-ui-v1.7.2.tar +k3s ctr images import images/oss-azure-secrets-store-provider-azure-v1.5.1.tar +k3s ctr images import images/openpolicyagent-gatekeeper-crds-v3.13.3.tar +k3s ctr images import images/openpolicyagent-gatekeeper-v3.13.3.tar +k3s ctr images import images/aws-secrets-manager-secrets-store-csi-driver-provider-aws-1.0.r2-58-g4ddce6a-2024.01.31.21.42.tar +k3s ctr images import images/ebs-csi-driver-aws-ebs-csi-driver-v1.23.0.tar +k3s ctr images import images/eks-distro-kubernetes-csi-external-attacher-v4.3.0-eks-1-28-4.tar +k3s ctr images import images/eks-distro-kubernetes-csi-external-provisioner-v3.5.0-eks-1-28-4.tar +k3s ctr images import images/eks-distro-kubernetes-csi-external-resizer-v1.8.0-eks-1-28-4.tar +k3s ctr images import images/eks-distro-kubernetes-csi-livenessprobe-v2.10.0-eks-1-28-4.tar +k3s ctr images import images/eks-distro-kubernetes-csi-node-driver-registrar-v2.8.0-eks-1-28-4.tar +k3s ctr images import images/eks-aws-load-balancer-controller-v2.11.0.tar +k3s ctr images import images/kubecost1-kubecost-cost-model-latest.tar +k3s ctr images import images/kubecost1-opencost-ui-prod-1.105.2.tar +k3s ctr images import images/prometheus-operator-prometheus-config-reloader-v0.80.0.tar +k3s ctr images import images/prometheus-operator-prometheus-operator-v0.80.0.tar +k3s ctr images import images/prometheus-alertmanager-v0.28.0.tar +k3s ctr images import images/prometheus-node-exporter-v1.8.2.tar +k3s ctr images import images/prometheus-prometheus-v3.1.0.tar +k3s ctr images import images/thanos-thanos-v0.37.2.tar +k3s ctr images import images/autoscaling-cluster-autoscaler-v1.27.1.tar +k3s ctr images import images/csi-secrets-store-driver-crds-v1.4.1.tar +k3s ctr images import images/csi-secrets-store-driver-v1.4.1.tar +k3s ctr images import images/ingress-nginx-kube-webhook-certgen-v1.5.1.tar +k3s ctr images import images/kube-state-metrics-kube-state-metrics-v2.14.0.tar +k3s ctr images import images/metrics-server-metrics-server-v0.6.4.tar +k3s ctr images import images/prometheus-adapter-prometheus-adapter-v0.11.2.tar +k3s ctr images import images/sig-storage-csi-node-driver-registrar-v2.10.0.tar +k3s ctr images import images/sig-storage-csi-node-driver-registrar-v2.8.0.tar +k3s ctr images import images/sig-storage-csi-provisioner-v4.0.0.tar +k3s ctr images import images/sig-storage-csi-snapshotter-v6.3.3.tar +k3s ctr images import images/sig-storage-livenessprobe-v2.10.0.tar +k3s ctr images import images/sig-storage-livenessprobe-v2.12.0.tar +k3s ctr images import images/sig-storage-nfsplugin-v4.7.0.tar +k3s ctr images import images/sig-storage-snapshot-controller-v8.1.0.tar +k3s ctr images import images/sig-storage-snapshot-validation-webhook-v8.1.0.tar diff --git a/go.mod b/go.mod index 0837cda0d..6c5bf93c6 100644 --- a/go.mod +++ b/go.mod @@ -12,9 +12,9 @@ require ( k8s.io/apimachinery v0.34.3 k8s.io/autoscaler/vertical-pod-autoscaler v1.0.0 kmodules.xyz/client-go v0.34.3 - kmodules.xyz/image-packer v0.0.0-20260712174708-18b029a2e515 + kmodules.xyz/image-packer v0.0.0-20260816165133-2fd27b057a22 kmodules.xyz/objectstore-api v0.34.0 - kmodules.xyz/resource-metadata v0.48.0 + kmodules.xyz/resource-metadata v0.48.1-0.20260713095944-b5ef2148513d kmodules.xyz/schema-checker v0.4.3 kubeops.dev/external-dns-operator v0.3.1-0.20260409053434-d3838ac10fdf kubeops.dev/installer v0.0.0-20260712202131-29761e3b9190 @@ -118,7 +118,7 @@ require ( gomodules.xyz/jsonpath v0.0.2 // indirect gomodules.xyz/mergo v0.3.13 // indirect gomodules.xyz/pointer v0.1.0 // indirect - gomodules.xyz/x v0.0.17 // indirect + gomodules.xyz/x v0.0.18 // indirect google.golang.org/protobuf v1.36.11 // indirect gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect diff --git a/go.sum b/go.sum index f6898b33b..7aad3cdfd 100644 --- a/go.sum +++ b/go.sum @@ -290,8 +290,8 @@ gomodules.xyz/pointer v0.1.0 h1:sG2UKrYVSo6E3r4itAjXfPfe4fuXMi0KdyTHpR3vGCg= gomodules.xyz/pointer v0.1.0/go.mod h1:sPLsC0+yLTRecUiC5yVlyvXhZ6LAGojNCRWNNqoplvo= gomodules.xyz/testing v0.0.4 h1:XGKt4B64mBe7P9kPR0Rz1nCQpWoSpBEFdTGkfU1RLe4= gomodules.xyz/testing v0.0.4/go.mod h1:hD6aXtv9eVycPwS01zv+QTl5BrK2DXQgr6bHqnrW+44= -gomodules.xyz/x v0.0.17 h1:Ik3wf0suCMiYPY0miFUh+q8BpjsUHc/7zvANbFViBQA= -gomodules.xyz/x v0.0.17/go.mod h1:7R5182LvgWj1ZGlnpbhfSLsxM3lFN7LBettztpX+A2I= +gomodules.xyz/x v0.0.18 h1:Hm4YKg32VYJmFOKpV4mLIPXEpkDFVIso3AhJC/ME9oc= +gomodules.xyz/x v0.0.18/go.mod h1:lhsalLjQeL2ce489fu7xEVcR5nowKgltuvnXLGgUAdc= google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= @@ -337,8 +337,8 @@ kmodules.xyz/custom-resources v0.34.0 h1:ljkIYzIq0A3Awj87kkpuYqS9aifuyR3Hr9q2OVK kmodules.xyz/custom-resources v0.34.0/go.mod h1:pcA/n/CnrycjKCRNtU9Z+l5svhzFncLY2Kn9pqeXDVs= kmodules.xyz/go-containerregistry v0.0.15 h1:PRY5FDOzb6u23KOulQ4SWNdeUkBKmezLyJXP88q4EPw= kmodules.xyz/go-containerregistry v0.0.15/go.mod h1:rO0DEbYYEu1BfVcZ1pXV+3RgzVXr/k5hXcO+BQYVVDI= -kmodules.xyz/image-packer v0.0.0-20260712174708-18b029a2e515 h1:nNhcpbWvUP/HKrGkdfhtJybO+Kxu6o1OudrmwAWZW/k= -kmodules.xyz/image-packer v0.0.0-20260712174708-18b029a2e515/go.mod h1:dQmHdWXo2khatwUN9tvzd3u0FUJelez7TkcoWfUrxZU= +kmodules.xyz/image-packer v0.0.0-20260816165133-2fd27b057a22 h1:D6WYRFFlDJo4YGAS8e8b5Vg5OeOB+k5oTUI1cbgQoIk= +kmodules.xyz/image-packer v0.0.0-20260816165133-2fd27b057a22/go.mod h1:qGW7hgwWT+13A9GOvjuRiRpuDUoHIwda1huOt9W7hHs= kmodules.xyz/monitoring-agent-api v0.34.0 h1:SNgKvC1j8oYWQcdClyV2T5GsOQoG40c3pK9aYKm0j8A= kmodules.xyz/monitoring-agent-api v0.34.0/go.mod h1:XFDfMHDZQeNEPdTDeDr4M0dT4UCWs+4IYzgHw7JDlms= kmodules.xyz/objectstore-api v0.34.0 h1:h16QGeKAJB27mj0rhvm3I0q0ulE99TgIulob/UkXzRc= @@ -347,8 +347,8 @@ kmodules.xyz/offshoot-api v0.34.0 h1:HnOOp8FrCjTWjtNApRDo6Ahe79tOlLrJmyye4xxO4Kk kmodules.xyz/offshoot-api v0.34.0/go.mod h1:F+B59yYw4CZJ4uD4xu6C+mMLzIXUtuH7E+SbDICl9jE= kmodules.xyz/prober v0.34.0 h1:ElZkZYCjLaytAA0M8EH42To7i9gh1IIX+d0qfaIohys= kmodules.xyz/prober v0.34.0/go.mod h1:rsu/fxxfNxY70GDbH6Ju8G66459hi7AhWSSBoiIp8ic= -kmodules.xyz/resource-metadata v0.48.0 h1:DsOQ/YWVQiK1DHHKvzB5mU5aZI0Nyu6tN+Yl9NyRspg= -kmodules.xyz/resource-metadata v0.48.0/go.mod h1:ejz7IVjhqmj6VH8CVfprocJK/IM++OeunrfUp51ZrIw= +kmodules.xyz/resource-metadata v0.48.1-0.20260713095944-b5ef2148513d h1:laN/fRaagjjNLv4yyK63eN8p3hrH6GWT2Bv+wQ8dqh8= +kmodules.xyz/resource-metadata v0.48.1-0.20260713095944-b5ef2148513d/go.mod h1:6J9G/+Hs9ysFCxfSsFhK/H63nEE7wZz6smyPifxbhlc= kmodules.xyz/schema-checker v0.4.3 h1:LKXKNWwJ0bFOqCMbyfZk38uVJIejXsANdp7l+fkIiJQ= kmodules.xyz/schema-checker v0.4.3/go.mod h1:JjUB6Ih4gnrBwzJNO91Dz9xa8J92UHyvPSyfX++sksM= kubeops.dev/external-dns-operator v0.3.1-0.20260409053434-d3838ac10fdf h1:mx8EWPxhDZkNM+knVHjEVxxUYDOwOCR18Rf85vHCA78= diff --git a/hack/scripts/update-catalog.sh b/hack/scripts/update-catalog.sh index 8becfb9db..a81a3e806 100755 --- a/hack/scripts/update-catalog.sh +++ b/hack/scripts/update-catalog.sh @@ -26,7 +26,103 @@ rm -rf /tmp/hub image-packer list --root-dir=charts --output-dir=catalog -image-packer list-feature-charts --root-dir=charts --output-dir=catalog +# Feature charts left out of catalog/feature-chart-images.yaml because another +# catalog already publishes their images. Rendering them here would duplicate +# those lists, and would mirror a second copy of every database image. +# +# - charts owned by this repo -> catalog/imagelist.yaml +# - charts owned by a component -> that component installer's own +# catalog/imagelist.yaml, collected per org by appscode-cloud/artifacts +# (pkg/collect/orgs.go) +# +# Externally maintained charts -- cert-manager, flux2, keda, kube-prometheus-stack, +# snapshot-controller -- are deliberately NOT excluded. Rendering them from the +# values their Feature carries is what ACE actually deploys, so they belong in +# this file rather than in a second hand-curated source. +# +# Charts NOT listed here -- reloader, prometheus-adapter, kyverno, longhorn, +# opencost, ... -- have no other publisher, which is why their images went +# unmirrored until now. +feature_chart_exclusions=( + # appscode-cloud/installer + aceshifter + catalog-manager + cluster-presets + inbox-ui + kubedb-ui-presets + license-proxyserver + license-proxyserver-manager + opscenter-features + service-backend + service-gateway-presets + service-provider + stash-presets + # kubedb/installer + kubedb + kubedb-opscenter + kubedb-provider-aws + kubedb-provider-azure + kubedb-provider-gcp + prepare-cluster + # kubestash/installer + kubestash + # kubevault/installer + kubevault + kubevault-opscenter + # kubeops/installer + cert-manager-csi-driver-cacerts + config-syncer + external-dns-operator + falco-ui-server + gatekeeper-grafana-dashboards + gatekeeper-library + kube-ui-server + opencost-grafana-dashboards + operator-shard-manager + panopticon + scanner + sidekick + storage-metrics-server + supervisor + # kluster-manager/installer + cluster-auth-manager + cluster-gateway-manager + cluster-manager-hub + cluster-manager-spoke + cluster-profile-manager + cluster-proxy-manager + fluxcd-manager + hub-cluster-robot + managed-serviceaccount-manager + # open-viz/installer + grafana-operator + kube-grafana-dashboards + monitoring-operator + # opnpulse/installer + appscode-otel-stack + inbox-agent + inbox-server + prom-label-proxy + tenant-operator + thanos-operator + # stashed/installer + stash + stash-opscenter + # voyagermesh/installer + gateway-api + voyager + voyager-gateway + # virtual-secrets/installer + secrets-store-csi-driver-provider-virtual-secrets + virtual-secrets-server +) + +exclude_args=() +for chart in "${feature_chart_exclusions[@]}"; do + exclude_args+=("--exclude-chart=${chart}") +done + +image-packer list-feature-charts --root-dir=charts --output-dir=catalog "${exclude_args[@]}" image-packer ace-up --dir=. @@ -45,6 +141,7 @@ image-packer generate-scripts --insecure --allow-nondistributable-artifacts \ --src=catalog/ace.yaml \ --src=catalog/editor-charts.yaml \ --src=catalog/feature-charts.yaml \ + --src=catalog/feature-chart-images.yaml \ --src=catalog/reusable-ui-charts.yaml image-packer generate-gcp-script --allow-nondistributable-artifacts \ diff --git a/vendor/kmodules.xyz/image-packer/pkg/lib/feature.go b/vendor/kmodules.xyz/image-packer/pkg/lib/feature.go new file mode 100644 index 000000000..12889d20e --- /dev/null +++ b/vendor/kmodules.xyz/image-packer/pkg/lib/feature.go @@ -0,0 +1,148 @@ +/* +Copyright AppsCode Inc. and Contributors + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package lib + +import ( + "fmt" + "maps" + "os" + "sort" + "strings" + "sync" + + "kmodules.xyz/go-containerregistry/name" + + shell "gomodules.xyz/go-sh" + "k8s.io/klog/v2" + "sigs.k8s.io/yaml" +) + +const ( + FeatureChartRegistry = "ghcr.io/appscode-charts" + + featureChartWorkers = 8 +) + +// FeatureChart is a chart pinned by a Feature or FeatureSet, along with the +// values that resource deploys it with. +type FeatureChart struct { + Name string + Version string + Values map[string]any +} + +func (c FeatureChart) Ref() string { + return fmt.Sprintf("%s/%s:%s", FeatureChartRegistry, c.Name, c.Version) +} + +// FeatureChartImages renders each feature chart at its pinned version with the +// values its Feature carries and returns the images they reference. Charts that +// fail to render are reported in skipped rather than failing the whole run, so +// that one broken chart can't silently empty the catalog. +func FeatureChartImages(charts []FeatureChart) (images []string, skipped []string, err error) { + found := map[string]string{} + + var mu sync.Mutex + var wg sync.WaitGroup + sem := make(chan struct{}, featureChartWorkers) + + for _, chart := range charts { + wg.Add(1) + go func() { + defer wg.Done() + sem <- struct{}{} + defer func() { <-sem }() + + chartImages, err := featureChartImages(chart) + + mu.Lock() + defer mu.Unlock() + if err != nil { + klog.Infof("Skipping feature chart %s due to error: %v", chart.Ref(), err) + skipped = append(skipped, chart.Ref()) + return + } + maps.Copy(found, chartImages) + }() + } + wg.Wait() + + sort.Strings(skipped) + return dropUntaggedImages(ListImages(found)), skipped, nil +} + +// dropUntaggedImages removes digest-only references. generate-scripts derives a +// tarball name and a destination reference from the tag, so it rejects images +// that carry only a digest; keeping them would break every catalog that feeds +// on this list. Feature charts do occasionally pin by digest, so drop those +// refs loudly rather than let the whole run fail. +func dropUntaggedImages(images []string) []string { + result := make([]string, 0, len(images)) + var dropped []string + for _, img := range images { + ref, err := name.ParseReference(img) + if err != nil || ref.Tag == "" { + dropped = append(dropped, img) + continue + } + result = append(result, img) + } + if len(dropped) > 0 { + klog.Warningf("dropping %d digest-only image ref(s), not mirrorable by generate-scripts: %s", + len(dropped), strings.Join(dropped, ", ")) + } + return result +} + +func featureChartImages(chart FeatureChart) (map[string]string, error) { + // No release name: some feature chart names are longer than helm's 53 char + // release name limit, and the generated name has no bearing on images. + args := []any{ + "template", + fmt.Sprintf("oci://%s/%s", FeatureChartRegistry, chart.Name), + "--version=" + chart.Version, + } + + if len(chart.Values) > 0 { + content, err := yaml.Marshal(chart.Values) + if err != nil { + return nil, err + } + filename, err := writeTempValues(chart.Name, content) + if err != nil { + return nil, err + } + defer os.Remove(filename) // nolint:errcheck + + args = append(args, "--values="+filename) + } + + sh := shell.NewSession() + sh.SetDir(os.TempDir()) + sh.ShowCMD = true + + out, err := sh.Command("helm", args...).Output() + if err != nil { + return nil, err + } + + images := map[string]string{} + if err := CollectRenderedImages(out, images); err != nil { + return nil, err + } + return images, nil +} diff --git a/vendor/kmodules.xyz/image-packer/pkg/lib/image.go b/vendor/kmodules.xyz/image-packer/pkg/lib/image.go index b806dc922..245cb7e1e 100644 --- a/vendor/kmodules.xyz/image-packer/pkg/lib/image.go +++ b/vendor/kmodules.xyz/image-packer/pkg/lib/image.go @@ -17,7 +17,6 @@ limitations under the License. package lib import ( - "io" "os" "path/filepath" "regexp" @@ -25,6 +24,7 @@ import ( "strings" "kmodules.xyz/client-go/tools/parser" + "kmodules.xyz/go-containerregistry/name" shell "gomodules.xyz/go-sh" "k8s.io/apimachinery/pkg/runtime/schema" @@ -73,24 +73,13 @@ func mapChartImages(rootDir string, values map[string]string, sh *shell.Session, content, ok := values[chartName] if ok { - tmpfile, err := os.CreateTemp("", chartName+"-val-*.yaml") + filename, err := writeTempValues(chartName, []byte(content)) if err != nil { klog.Fatal(err) } - defer os.Remove(tmpfile.Name()) // nolint:errcheck + defer os.Remove(filename) // nolint:errcheck - if _, err := io.WriteString(tmpfile, content); err != nil { - tmpfile.Close() // nolint:errcheck - klog.Fatal(err) - } - - // 4. Close the file handle - // We must close the file handle before attempting to read from it or before the defer os.Remove runs. - if err := tmpfile.Close(); err != nil { - klog.Fatal(err) - } - - args = append(args, "--values="+tmpfile.Name()) + args = append(args, "--values="+filename) } if _, err := os.Stat(filepath.Join(rootDir, chartName, "ci", "ci-values.yaml")); err == nil { @@ -107,22 +96,85 @@ func mapChartImages(rootDir string, values map[string]string, sh *shell.Session, } } if out, err := sh.SetDir(rootDir).Command("helm", args...).Output(); err == nil { - helmout, err := parser.ListResources(out) - if err != nil { + if err := CollectRenderedImages(out, images); err != nil { panic(err) } - - for _, ri := range helmout { - collectImages(ri.Object.UnstructuredContent(), images, ri.Object.GetObjectKind().GroupVersionKind().GroupKind().String()) - } } else { klog.Infof("Skipping %s due to error: %v", chartName, err) } } +func writeTempValues(chartName string, content []byte) (string, error) { + tmpfile, err := os.CreateTemp("", chartName+"-val-*.yaml") + if err != nil { + return "", err + } + + if _, err := tmpfile.Write(content); err != nil { + tmpfile.Close() // nolint:errcheck + os.Remove(tmpfile.Name()) // nolint:errcheck + return "", err + } + + // The handle must be closed before helm reads the file. + if err := tmpfile.Close(); err != nil { + os.Remove(tmpfile.Name()) // nolint:errcheck + return "", err + } + return tmpfile.Name(), nil +} + +// CollectRenderedImages records every image referenced by the resources in a +// `helm template` output into images, keyed by image and valued by the GroupKind +// of the resource that referenced it. +func CollectRenderedImages(out []byte, images map[string]string) error { + resources, err := parser.ListResources(out) + if err != nil { + return err + } + for _, ri := range resources { + collectImages(ri.Object.UnstructuredContent(), images, ri.Object.GetObjectKind().GroupVersionKind().GroupKind().String()) + } + return nil +} + // placeholderRE matches a shell-style ${...} template placeholder. var placeholderRE = regexp.MustCompile(`\$\{[^}]*\}`) +// containerArgRE matches a --flag=value container argument. +var containerArgRE = regexp.MustCompile(`^--[A-Za-z0-9._-]+=(\S+)$`) + +// imageFromContainerArg reports an image reference passed to a container as a +// flag, e.g. --acme-http01-solver-image= or --prometheus-config-reloader=. +// An operator that launches other workloads takes their image this way, and the +// reference appears nowhere else in the manifest. +func imageFromContainerArg(arg string) (string, bool) { + m := containerArgRE.FindStringSubmatch(arg) + if m == nil { + return "", false + } + ref := m[1] + + // name.ParseReference is far too permissive on its own: it defaults the + // registry to docker.io and the tag to latest, so it accepts most flag + // values (--log-level=info parses). Demand an explicit registry host and an + // explicit tag or digest, which every image passed this way carries. + if strings.Contains(ref, "://") { + return "", false + } + host, remainder, ok := strings.Cut(ref, "/") + if !ok || (!strings.ContainsAny(host, ".:") && host != "localhost") { + return "", false + } + if last := remainder[strings.LastIndex(remainder, "/")+1:]; !strings.ContainsAny(last, ":@") { + return "", false + } + if _, err := name.ParseReference(ref); err != nil { + return "", false + } + return ref, true +} + func collectImages(obj map[string]any, images map[string]string, srcGK string) { for k, v := range obj { if k == "image" { @@ -131,6 +183,16 @@ func collectImages(obj map[string]any, images map[string]string, srcGK string) { images[img] = srcGK } } + } else if k == "args" || k == "command" { + if items, ok := v.([]any); ok { + for _, item := range items { + if s, ok := item.(string); ok { + if img, ok := imageFromContainerArg(s); ok { + images[img] = srcGK + } + } + } + } } else if m, ok := v.(map[string]any); ok { collectImages(m, images, srcGK) } else if items, ok := v.([]any); ok { diff --git a/vendor/modules.txt b/vendor/modules.txt index 0dc65b269..b66a9dca7 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -416,8 +416,8 @@ gomodules.xyz/mergo # gomodules.xyz/pointer v0.1.0 ## explicit; go 1.15 gomodules.xyz/pointer -# gomodules.xyz/x v0.0.17 -## explicit; go 1.22.0 +# gomodules.xyz/x v0.0.18 +## explicit; go 1.25.0 gomodules.xyz/x/filepath # google.golang.org/protobuf v1.36.11 ## explicit; go 1.23 @@ -928,7 +928,7 @@ kmodules.xyz/custom-resources/crds # kmodules.xyz/go-containerregistry v0.0.15 ## explicit; go 1.24.0 kmodules.xyz/go-containerregistry/name -# kmodules.xyz/image-packer v0.0.0-20260712174708-18b029a2e515 +# kmodules.xyz/image-packer v0.0.0-20260816165133-2fd27b057a22 ## explicit; go 1.25.0 kmodules.xyz/image-packer/pkg/lib # kmodules.xyz/monitoring-agent-api v0.34.0 @@ -943,7 +943,7 @@ kmodules.xyz/offshoot-api/api/v1 # kmodules.xyz/prober v0.34.0 ## explicit; go 1.24.0 kmodules.xyz/prober/api/v1 -# kmodules.xyz/resource-metadata v0.48.0 +# kmodules.xyz/resource-metadata v0.48.1-0.20260713095944-b5ef2148513d ## explicit; go 1.25.0 kmodules.xyz/resource-metadata/apis/shared kmodules.xyz/resource-metadata/apis/ui