istio

1
# docker.yaml provides details about each Dockerfile in the repo.
2
# Unlike standard Dockerfiles, Istio builds artifacts outside of docker and then copies them to a temp folder;
3
# This folder is then passed as the docker context. This avoids complex .dockerignore or large context loads.
4

5
# Example image config
6
example:
7
- name: helloworld # Name of the image. Will end up pushed to <HUB>/helloworld:<TAG>
8
  dockerfile: helloworld/Dockerfile.proxyv2
9
  files:
10
  # Include a static file
11
  # Inside the Dockerfile, this is referenced by the base name (README.md), not the full name.
12
  - samples/README.md
13
  targets:
14
  # Build a file with make, then include as a static file
15
  - ${TARGET_OUT_LINUX}/helloworld
16

17
images:
18

19
# Base images
20
- name: base
21
  dockerfile: docker/Dockerfile.base
22
  base: true
23

24
- name: distroless
25
  dockerfile: docker/Dockerfile.distroless
26
  base: true
27

28
# Production images
29
- name: proxyv2
30
  dockerfile: pilot/docker/Dockerfile.proxyv2
31
  files:
32
  - tools/packaging/common/envoy_bootstrap.json
33
  - tools/packaging/common/gcp_envoy_bootstrap.json
34
  - ${TARGET_OUT_LINUX}/${RELEASE_MODE}/${SIDECAR}
35
  targets:
36
  - ${TARGET_OUT_LINUX}/pilot-agent
37
- name: pilot
38
  dockerfile: pilot/docker/Dockerfile.pilot
39
  files:
40
  - tools/packaging/common/envoy_bootstrap.json
41
  - tools/packaging/common/gcp_envoy_bootstrap.json
42
  targets:
43
  - ${TARGET_OUT_LINUX}/pilot-discovery
44

45
- name: istioctl
46
  dockerfile: istioctl/docker/Dockerfile.istioctl
47
  targets:
48
  - ${TARGET_OUT_LINUX}/istioctl
49

50
- name: operator
51
  dockerfile: operator/docker/Dockerfile.operator
52
  files:
53
  - manifests
54
  targets:
55
  - ${TARGET_OUT_LINUX}/operator
56

57
- name: install-cni
58
  dockerfile: cni/deployments/kubernetes/Dockerfile.install-cni
59
  targets:
60
  - ${TARGET_OUT_LINUX}/istio-cni
61
  - ${TARGET_OUT_LINUX}/install-cni
62

63
- name: ztunnel
64
  dockerfile: pilot/docker/Dockerfile.ztunnel
65
  files:
66
  - ${TARGET_OUT_LINUX}/ztunnel # TODO "${RELEASE_MODE}" to allow separate debug builds
67

68
  # Test images
69
- name: app
70
  dockerfile: pkg/test/echo/docker/Dockerfile.app
71
  files:
72
  - tests/testdata/certs
73
  targets:
74
  - ${TARGET_OUT_LINUX}/client
75
  - ${TARGET_OUT_LINUX}/server
76

77
# Sample authz server
78
- name: ext-authz
79
  dockerfile: samples/extauthz/docker/Dockerfile
80
  targets:
81
    - ${TARGET_OUT_LINUX}/extauthz
82

83
# TODO(https://github.com/istio/istio/issues/38224)
84
#- name: app_sidecar_rockylinux_8
85
#  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar_centos_8
86
#  files:
87
#  - tools/packaging/common/envoy_bootstrap.json
88
#  - tests/testdata/certs
89
#  - pkg/test/echo/docker/echo-start.sh
90
#  - pkg/test/echo/docker/sudoers
91
#  targets:
92
#  - ${TARGET_OUT_LINUX}/release/istio-sidecar.rpm
93
#  - ${TARGET_OUT_LINUX}/client
94
#  - ${TARGET_OUT_LINUX}/server
95
- name: app_sidecar_debian_11
96
  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar
97
  files:
98
  - tools/packaging/common/envoy_bootstrap.json
99
  - tests/testdata/certs
100
  - pkg/test/echo/docker/echo-start.sh
101
  - pkg/test/echo/docker/sudoers
102
  targets:
103
  - ${TARGET_OUT_LINUX}/release/istio-sidecar.deb
104
  - ${TARGET_OUT_LINUX}/client
105
  - ${TARGET_OUT_LINUX}/server
106
  emulationRequired: true
107
- name: app_sidecar_ubuntu_jammy
108
  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar
109
  files:
110
  - tools/packaging/common/envoy_bootstrap.json
111
  - tests/testdata/certs
112
  - pkg/test/echo/docker/echo-start.sh
113
  - pkg/test/echo/docker/sudoers
114
  targets:
115
  - ${TARGET_OUT_LINUX}/release/istio-sidecar.deb
116
  - ${TARGET_OUT_LINUX}/client
117
  - ${TARGET_OUT_LINUX}/server
118
  emulationRequired: true
119
- name: app_sidecar_ubuntu_bionic
120
  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar
121
  files:
122
  - tools/packaging/common/envoy_bootstrap.json
123
  - tests/testdata/certs
124
  - pkg/test/echo/docker/echo-start.sh
125
  - pkg/test/echo/docker/sudoers
126
  targets:
127
  - ${TARGET_OUT_LINUX}/release/istio-sidecar.deb
128
  - ${TARGET_OUT_LINUX}/client
129
  - ${TARGET_OUT_LINUX}/server
130
  emulationRequired: true
131

132
# Test base images
133
- name: app_sidecar_base_debian_11 # latest debian
134
  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar_base
135
  base: true
136
- name: app_sidecar_base_ubuntu_jammy # newest ubuntu
137
  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar_base
138
  base: true
139
- name: app_sidecar_base_ubuntu_bionic # oldest supported ubuntu
140
  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar_base
141
  base: true
142
#  TODO(https://github.com/istio/istio/issues/38224)
143
#- name: app_sidecar_base_rockylinux_8 # newest RHEL-based
144
#  dockerfile: pkg/test/echo/docker/Dockerfile.app_sidecar_base_centos
145
#  base: true
146