Use synced images

components/operator/Dockerfile

@@ -4,7 +4,7 @@
 
 
 # Build the operator binary
-FROM golang:1.22.5 as builder
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/golang:1.22.5-alpine as builder
 
 WORKDIR /workdir
 
@@ -24,7 +24,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o operator ./components/o
 
 # Replace main images in values.yaml
 # Bumping serverless images in the values.yaml - used for building "local" and "dev" images
-FROM alpine:3.20.1 as replacer
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1 as replacer
 
 WORKDIR /workdir
 

components/runtimes/nodejs/nodejs18/Dockerfile

@@ -1,5 +1,5 @@
-# alpine 3.20.1
-FROM alpine@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1
+
 # https://pkgs.alpinelinux.org/packages?name=nodejs&branch=v3.18&repo=main&arch=&maintainer=
 ENV NODE_VERSION=18.20.1-r0
 

components/runtimes/nodejs/nodejs20/Dockerfile

@@ -1,5 +1,4 @@
-# alpine 3.20.1
-FROM alpine@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1
 
 # https://pkgs.alpinelinux.org/packages?name=nodejs&branch=v3.20&repo=main&arch=&maintainer=
 ENV NODE_VERSION=20.15.1-r0

components/runtimes/python/python312/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12.3-alpine3.20
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/python:3.12.3-alpine3.20
 
 # Serverless
 LABEL source = [email protected]:kyma-project/serverless.git

components/runtimes/python/python39/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.9.19-alpine3.20
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/python:3.9.19-alpine3.20
 
 # Serverless
 LABEL source = [email protected]:kyma-project/serverless.git

components/serverless/deploy/jobinit/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.22.5-alpine3.20 as builder
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/golang:1.22.5-alpine as builder
 
 ENV BASE_APP_DIR=/workspace/go/src/github.com/kyma-project/serverless \
     CGO_ENABLED=1 \
@@ -20,7 +20,7 @@ RUN go build -ldflags "-s -w" -a -o jobinit ./components/serverless/cmd/jobinit/
     && mkdir /app \
     && mv ./jobinit /app/jobinit
 
-FROM europe-docker.pkg.dev/kyma-project/prod/external/alpine:3.20.0
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1
 ENV LIBGIT2_VERSION=1.5.2-r0
 
 LABEL source = [email protected]:kyma-project/serverless.git

components/serverless/deploy/manager/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.22.5-alpine3.20 as builder
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/golang:1.22.5-alpine as builder
 
 ENV BASE_APP_DIR=/workspace/go/src/github.com/kyma-project/serverless \
     CGO_ENABLED=1 \
@@ -20,11 +20,11 @@ RUN go build -ldflags "-s -w" -a -o manager ./components/serverless/cmd/manager/
     && mkdir /app \
     && mv ./manager /app/manager
 
-FROM europe-docker.pkg.dev/kyma-project/prod/external/alpine:3.20.0 as certs
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1 as certs
 
 RUN apk add --no-cache ca-certificates
 
-FROM europe-docker.pkg.dev/kyma-project/prod/external/alpine:3.20.0
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1
 
 ENV LIBGIT2_VERSION=1.5.2-r0
 

components/serverless/deploy/webhook/Dockerfile

@@ -1,5 +1,4 @@
-# image builder base on golang:1.22.3-alpine3.20
-FROM golang@sha256:e62cde42bd32f7b0435c997d4048ee7b76042e31bde380898e1df97eabdb01fd as builder
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/golang:1.22.5-alpine as builder
 
 ENV BASE_APP_DIR=/workspace/go/src/github.com/kyma-project/serverless \
     CGO_ENABLED=0 \
@@ -17,7 +16,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o webhook-server ./compon
 && mv ./webhook-server /app/webhook-server
 
 # get latest CA certs from alpine:3.17.4
-FROM europe-docker.pkg.dev/kyma-project/prod/external/alpine:3.20.0 as certs
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1 as certs
 RUN apk add --no-cache ca-certificates
 
 FROM scratch

config/serverless/charts/docker-registry/templates/deployment.yaml

@@ -47,7 +47,7 @@ spec:
       hostIPC: false # Optional. The default is false if the entry is not there.
       initContainers:
         - name: generate-htpasswd
-          image: "{{ include "imageurl" (dict "reg" .Values.global.tpiContainerRegistry "img" .Values.global.images.registry) }}"
+          image: "{{ include "imageurl" (dict "reg" .Values.global.tpiContainerRegistry "img" .Values.global.images.registry_init) }}"
 {{- if .Values.initContainers.securityContext }}
           securityContext:
             {{- include "tplValue" ( dict "value" .Values.initContainers.securityContext "context" . ) | nindent 12 }}

config/serverless/values.yaml

@@ -82,6 +82,10 @@ global:
       name: "function-build-init"
       version: "main"
       directory: "prod"
+    registry_init: # https://github.com/kyma-project/docker-registry/tree/main/components/registry-init
+      name: "registry-init"
+      version: "v20240506-57d31b1d"
+      directory: "prod"
     function_runtime_nodejs18:
       name: "function-runtime-nodejs18"
       version: "main"
@@ -99,13 +103,13 @@ global:
       version: "main"
       directory: "prod"
     kaniko_executor:
-      name: "tpi/kaniko-executor"
-      version: "1.9.2-ea54c1c7"
-      directory: "prod"
+      name: "gcr.io/kaniko-project/executor"
+      version: "v1.23.2"
+      directory: "prod/external"
     registry:
-      name: "tpi/registry"
-      version: "2.8.1-1ae4c190"
-      directory: "prod"
+      name: "registry"
+      version: "2.8.3"
+      directory: "prod/external"
   serverlessPriorityClassValue: 2000000
   serverlessPriorityClassName: "serverless-priority"
 images:

sec-scanners-config.yaml

@@ -8,8 +8,9 @@ protecode:
   - europe-docker.pkg.dev/kyma-project/prod/function-runtime-nodejs20:main
   - europe-docker.pkg.dev/kyma-project/prod/function-runtime-python39:main
   - europe-docker.pkg.dev/kyma-project/prod/function-runtime-python312:main
-  - europe-docker.pkg.dev/kyma-project/prod/tpi/kaniko-executor:1.9.2-ea54c1c7
-  - europe-docker.pkg.dev/kyma-project/prod/tpi/registry:2.8.1-1ae4c190
+  - europe-docker.pkg.dev/kyma-project/prod/external/gcr.io/kaniko-project/executor:v1.23.2
+  - europe-docker.pkg.dev/kyma-project/prod/external/registry:2.8.3
+  - europe-docker.pkg.dev/kyma-project/prod/registry-init:v20240506-57d31b1d
 whitesource:
   language: golang-mod
   subprojects: false

tests/gitserver/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.20
+FROM europe-docker.pkg.dev/kyma-project/prod/external/library/alpine:3.20.1
 
 RUN apk add --no-cache git-daemon && \
     # apache2 and apache2-utils need to be in version smaller or equal to 2.4.58-r0