feat: Add certs in Scratch image

formancehq · Jan 8, 2024 · 240f51c · 240f51c
1 parent 1ed5150
commit 240f51c
Show file tree

Hide file tree

Showing 14 changed files with 64 additions and 12 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -168,15 +168,15 @@ jobs:
       - run: kubectl config use-context arn:aws:eks:eu-west-1:955332203423:cluster/staging-eu-west-1-hosting
       - name: Deploy in staging
         run: |
-          kubectl set image deployment -n formance-system agent agent=ghcr.io/formancehq/agent:${GITHUB_SHA}
-          kubectl set image deployment -n formance-system operator operator=ghcr.io/formancehq/operator:${GITHUB_SHA}
-          kubectl patch Versions default -p "{\"spec\":{\"ledger\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"payments\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"auth\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"gateway\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"orchestration\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"reconciliation\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"search\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"stargate\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"wallets\": \"${GITHUB_SHA}\"}}" --type=merge
-          kubectl patch Versions default -p "{\"spec\":{\"webhooks\": \"${GITHUB_SHA}\"}}" --type=merge
+          kubectl set image deployment -n formance-system agent agent=ghcr.io/formancehq/agent:${GITHUB_SHA}-scratch
+          kubectl set image deployment -n formance-system operator operator=ghcr.io/formancehq/operator:${GITHUB_SHA}-scratch
+          kubectl patch Versions default -p "{\"spec\":{\"ledger\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"payments\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"auth\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"gateway\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"orchestration\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"reconciliation\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"search\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"stargate\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"wallets\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
+          kubectl patch Versions default -p "{\"spec\":{\"webhooks\": \"${GITHUB_SHA}-scratch\"}}" --type=merge
diff --git a/components/fctl/scratch.Dockerfile b/components/fctl/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY fctl /usr/bin/fctl
 ENV OTEL_SERVICE_NAME fctl
 ENTRYPOINT ["/usr/bin/fctl"]
diff --git a/components/ledger/scratch.Dockerfile b/components/ledger/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY ledger /usr/bin/ledger
 ENV OTEL_SERVICE_NAME ledger
 ENTRYPOINT ["/usr/bin/ledger"]

diff --git a/components/operator/scratch.Dockerfile b/components/operator/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY operator /usr/bin/operator
 ENV OTEL_SERVICE_NAME operator
 ENTRYPOINT ["/usr/bin/operator"]
diff --git a/components/payments/scratch.Dockerfile b/components/payments/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY payments /usr/bin/payments
 ENV OTEL_SERVICE_NAME payments
 ENTRYPOINT ["/usr/bin/payments"]

diff --git a/ee/agent/scratch.Dockerfile b/ee/agent/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY agent /usr/bin/agent
 ENV OTEL_SERVICE_NAME agent
 ENTRYPOINT ["/usr/bin/agent"]
diff --git a/ee/auth/scratch.Dockerfile b/ee/auth/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY auth /usr/bin/auth
 ENV OTEL_SERVICE_NAME auth
 ENTRYPOINT ["/usr/bin/auth"]

diff --git a/ee/gateway/scratch.Dockerfile b/ee/gateway/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 ADD https://raw.githubusercontent.com/formancehq/stack/main/ee/gateway/Caddyfile /etc/caddy/Caddyfile
 COPY gateway /usr/bin/caddy
 ENV OTEL_SERVICE_NAME gateway

diff --git a/ee/orchestration/scratch.Dockerfile b/ee/orchestration/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY orchestration /usr/bin/orchestration
 ENV OTEL_SERVICE_NAME orchestration
 ENTRYPOINT ["/usr/bin/orchestration"]

diff --git a/ee/reconciliation/scratch.Dockerfile b/ee/reconciliation/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY reconciliation /usr/bin/reconciliation
 ENV OTEL_SERVICE_NAME reconciliation
 ENTRYPOINT ["/usr/bin/reconciliation"]

diff --git a/ee/search/scratch.Dockerfile b/ee/search/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY search /usr/bin/search
 ENV OTEL_SERVICE_NAME search
 ENTRYPOINT ["/usr/bin/search"]

diff --git a/ee/stargate/scratch.Dockerfile b/ee/stargate/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY stargate /usr/bin/stargate
 ENV OTEL_SERVICE_NAME stargate
 ENTRYPOINT ["/usr/bin/stargate"]

diff --git a/ee/wallets/scratch.Dockerfile b/ee/wallets/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY wallets /usr/bin/wallets
 ENV OTEL_SERVICE_NAME wallets
 ENTRYPOINT ["/usr/bin/wallets"]

diff --git a/ee/webhooks/scratch.Dockerfile b/ee/webhooks/scratch.Dockerfile
@@ -1,4 +1,8 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY webhooks /usr/bin/webhooks
 ENV OTEL_SERVICE_NAME webhooks
 ENTRYPOINT ["/usr/bin/webhooks"]