NcamGnrvngu/gitlab-build-images
1
0
Fork 0
mirror of https://ops.gitlab.net/gitlab-org/gitlab-build-images.git synced 2025-12-09 10:02:56 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add explicit kubectl sha256 check

Browse source
This commit is contained in:
Andrejs Cunskis 2022-04-29 16:08:04 +03:00
parent dd3ad9e4c9
commit 423759a39f
No known key found for this signature in database
GPG key ID: 87CB75083F227241
3 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Dockerfile.custom
View file

@ -90,8 +90,9 @@ RUN if [ -n "$GCLOUD_VERSION" ] ; then /scripts/install-gcloud $GCLOUD_VERSION;
# Kubectl
ARG KUBECTL_VERSION
ARG KUBECTL_DOWNLOAD_SHA256
RUN if [ -n "$KUBECTL_VERSION" ] ; then /scripts/install-kubectl $KUBECTL_VERSION; fi
RUN if [ -n "$KUBECTL_VERSION" ] ; then /scripts/install-kubectl $KUBECTL_VERSION $KUBECTL_DOWNLOAD_SHA256; fi
RUN locale-gen C.UTF-8
ENV LANG=C.UTF-8 \

2
scripts/custom-docker-build
View file

@ -230,11 +230,13 @@ function print_kubectl_args() {
case "$1" in
1.23)
KUBECTL_VERSION=1.23.0
KUBECTL_DOWNLOAD_SHA256=2d0f5ba6faa787878b642c151ccb2c3390ce4c1e6c8e2b59568b3869ba407c4f
;;
*) echo "Unknown kubectl version $1"; exit 1;
esac
printf -- "--build-arg KUBECTL_VERSION=%s " "$KUBECTL_VERSION"
printf -- "--build-arg KUBECTL_DOWNLOAD_SHA256=%s " "$KUBECTL_DOWNLOAD_SHA256"
}
function parse_arguments() {

6
scripts/install-kubectl
View file

@ -3,13 +3,11 @@
set -xeou pipefail
KUBECTL_VERSION=${1}
KUBECTL_DOWNLOAD_SHA256=${2}
KUBECTL_DOWNLOAD_URL="https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64"
curl -fsSL "${KUBECTL_DOWNLOAD_URL}/kubectl" -o kubectl
curl -fsSL "${KUBECTL_DOWNLOAD_URL}/kubectl.sha256" -o kubectl.sha256
echo "$(cat kubectl.sha256) kubectl" | sha256sum -c -
echo "${KUBECTL_DOWNLOAD_SHA256} kubectl" | sha256sum -c -
chmod +x kubectl
mv kubectl /usr/local/bin/kubectl
rm kubectl.sha256