diff --git a/cmd/image-syncer/external-images.yaml b/cmd/image-syncer/external-images.yaml deleted file mode 100644 index dafc9f86d53e..000000000000 --- a/cmd/image-syncer/external-images.yaml +++ /dev/null @@ -1,57 +0,0 @@ -targetRepoPrefix: "europe-docker.pkg.dev/kyma-project/prod/external/" -images: - - source: "alpine@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d" - tag: "3.20.3" - - source: "bitnami/postgres-exporter:0.11.1-debian-11-r69" - - source: "busybox@sha256:3b3128d9df6bbbcc92e2358e596c9fbd722a437a62bafbc51607970e9e3b8869" - tag: "1.34.1-v1" - - source: "curlimages/curl:7.78.0" - - source: "gcr.io/google-containers/pause:3.2" - - source: "goreleaser/goreleaser:v1.11.5" - # Golang image is pinned because it is force updated in the upstream. - - source: "golang@sha256:ac67716dd016429be8d4c2c53a248d7bcdf06d34127d3dc451bda6aa5a87bc06" - tag: "1.23.1-alpine3.20" - - source: "istio/pilot:1.23.2-distroless" - - source: "istio/proxyv2:1.23.2-distroless" - - source: "istio/install-cni:1.23.2-distroless" - - source: "jettech/kube-webhook-certgen:v1.5.0" - - source: "oryd/hydra:v1.11.8" - - source: "oryd/oathkeeper:v0.38.25-beta.1" - - source: "postgres@sha256:86c55091a74b9efe95396f65ddd83f0067ff47c3f09993621d6f94c835856445" - tag: "11.21-alpine3.18" - - source: "prom/pushgateway:v1.8.0" - - source: "eu.gcr.io/k8s-artifacts-prod/kube-state-metrics/kube-state-metrics:v2.5.0" - - source: "quay.io/jetstack/cert-manager-controller:v1.1.0" - - source: "quay.io/jetstack/cert-manager-cainjector:v1.1.0" - - source: "quay.io/jetstack/cert-manager-webhook:v1.1.0" - - source: "quay.io/prometheus-operator/prometheus-config-reloader:v0.66.0" - - source: "quay.io/prometheus-operator/prometheus-operator:v0.66.0" - - source: "quay.io/prometheus/alertmanager:v0.24.0" - - source: "nats@sha256:1bcddab51b8099aad943e1e558d9aa7e91000ebc6e08e308e8e95fa3b50a000b" - tag: "v20240102-2.10.7-alpine3.18" - - source: "natsio/nats-server-config-reloader:0.14.1" - - source: "quay.io/prometheus/prometheus:v2.45.0" - - source: "natsio/nats-box:0.14.1" - - source: "natsio/prometheus-nats-exporter:0.14.0" - - source: "nginx:1.23.3" - - source: "nginxinc/nginx-unprivileged@sha256:0065303bfa2a20793f9b5db326e94d68bdc7a69f79822091b8db5b3ec4753491" - tag: "1.27.1-alpine3.20" - - source: "fluent/fluentd@sha256:c8026af1f87f60db08e23ec0e62f779096abc93b2fc62aa4b57fc23a617451f6" - tag: "v1.16-debian-1" - - source: "gcr.io/istio-testing/ext-authz@sha256:8ffad059c8ad951102e5421562ac5b7cca129881903be8cbfdc5e910e49fd78e" - tag: "1.22-dev" - - source: "registry@sha256:12120425f07de11a1b899e418d4b0ea174c8d4d572d45bdb640f93bc7ca06a3d" - tag: "2.8.3-v1" # latest: 3.0.0-beta.1 <- wait for a fully supported release - - source: "gcr.io/kaniko-project/executor:v1.23.2" - - source: "python@sha256:11d30cce970c40aee8e993d302a15f8bc8204ecab7af1bae26b3fd00eb75ada2" - tag: "3.12-slim-bullseye" - - source: "fluent/fluent-bit@sha256:2113721429a144d504a148a0b14ec082ad28782b99ba55d5df0dde276ae22bc3" - tag: "3.1.8" # used by the kyma telemetry module - - source: "node@sha256:ba898e86c2cc720c8cf2ae05f8d2d4697fe0c8ca3e920d6fbf14a6cbf50bb9ca" - tag: "alpine3.20" - - source: "moby/buildkit:v0.15.2-rootless" - - source: "golangci/golangci-lint:v1.60.3" - - source: "node@sha256:a3816e038e05ea70d2640c845c285f49e416bdae2481a7ff94fde96647a10607" - tag: "22.3.0" - - source: "node@sha256:1a526b97cace6b4006256570efa1a29cd1fe4b96a5301f8d48e87c5139438a45" - tag: "20.17-alpine3.20" diff --git a/prow/cluster/resources/gatekeeper-constraints/workloads/saKymaPushImagesSecretTrustedUsage.yaml b/prow/cluster/resources/gatekeeper-constraints/workloads/saKymaPushImagesSecretTrustedUsage.yaml index e3dacc9256aa..9c1bec4732f5 100644 --- a/prow/cluster/resources/gatekeeper-constraints/workloads/saKymaPushImagesSecretTrustedUsage.yaml +++ b/prow/cluster/resources/gatekeeper-constraints/workloads/saKymaPushImagesSecretTrustedUsage.yaml @@ -46,9 +46,3 @@ spec: - image: "gcr.io/k8s-prow/sidecar:*" command: [ ] args: [ ] - # image-syncer - - image: "europe-docker.pkg.dev/kyma-project/prod/image-syncer:*" - command: - - /tools/entrypoint - args: [ ] - entrypoint_options: '^{.*"args":\["\/image-syncer","--images-file=cmd/image-syncer/external-images.yaml","--target-repo-auth-key=.*"\],"container_name":"test",.*}$' diff --git a/prow/jobs/kyma-project/test-infra/image-syncer.yaml b/prow/jobs/kyma-project/test-infra/image-syncer.yaml deleted file mode 100644 index 728dde001b5c..000000000000 --- a/prow/jobs/kyma-project/test-infra/image-syncer.yaml +++ /dev/null @@ -1,79 +0,0 @@ -# Code generated by rendertemplates. DO NOT EDIT. - - -presubmits: # runs on PRs - kyma-project/test-infra: - - name: pre-main-test-infra-image-syncer-dry-run - annotations: - description: "Dry-run of sync images from external sources to Kyma owned registry" - owner: "neighbors" - labels: - prow.k8s.io/pubsub.project: "sap-kyma-prow" - prow.k8s.io/pubsub.runID: "pre-main-test-infra-image-syncer-dry-run" - prow.k8s.io/pubsub.topic: "prowjobs" - preset-sa-kyma-push-images: "true" - run_if_changed: '^(cmd/image-syncer/external-images.yaml)' - skip_report: false - decorate: true - cluster: untrusted-workload - max_concurrency: 10 - branches: - - ^master$ - - ^main$ - spec: - containers: - - image: "europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20241029-d255e05c" - securityContext: - privileged: false - seccompProfile: - type: RuntimeDefault - allowPrivilegeEscalation: false - command: - - "/image-syncer" - args: - - "--dry-run" - - "--debug" - - "--images-file=cmd/image-syncer/external-images.yaml" - - "--target-repo-auth-key=$(GOOGLE_APPLICATION_CREDENTIALS)" - resources: - requests: - memory: 3Gi - cpu: 2 - -postsubmits: # runs on main - kyma-project/test-infra: - - name: post-main-test-infra-image-syncer-run - annotations: - description: "Sync images from external sources to Kyma owned registry" - owner: "neighbors" - labels: - prow.k8s.io/pubsub.project: "sap-kyma-prow" - prow.k8s.io/pubsub.runID: "post-main-test-infra-image-syncer-run" - prow.k8s.io/pubsub.topic: "prowjobs" - preset-sa-kyma-push-images: "true" - run_if_changed: '^(cmd/image-syncer/external-images.yaml)' - skip_report: false - decorate: true - cluster: trusted-workload - max_concurrency: 10 - branches: - - ^master$ - - ^main$ - spec: - containers: - - image: "europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20241029-d255e05c" - securityContext: - privileged: false - seccompProfile: - type: RuntimeDefault - allowPrivilegeEscalation: false - command: - - "/image-syncer" - args: - - "--images-file=cmd/image-syncer/external-images.yaml" - - "--target-repo-auth-key=$(GOOGLE_APPLICATION_CREDENTIALS)" - resources: - requests: - memory: 3Gi - cpu: 2 - \ No newline at end of file