CNG: replace alpine-certificates behaviors with gitlab-base
Summary
Related: gitlab-org/build/CNG!1086 (merged)
We snagged on Alpine updating the internal certificates package version, and removing an older one we pinned to. Let's stop doing that. Instead, let us build the patterns on top of gitlab-base
. All operational service containers will share this layer set, so it will actually end up in an efficiency boost to Pod instantiation / startup time.
Related issues
Actionable
-
🚧 Buildcertficates
container, with the scripting patterns fromalpine-certificate
, but based upongitlab-base
-
⚠ This image will be tagged based on the CNG's tag directly (15.5.0
,6-4-stable
, ...). This provides release consistency lacking in the current implementation. -
❔ Mirrorcertificates
tag toalpine-certificates
-
-
📢 Announce replacement (release post item) as consumers who mirror need to update behaviors -
⚠ Ensure DSOP is updated to include / replace -
🛠 Replace thealpine-certificates
container in charts with this by default -
🔊 Announce deprecation (release post itemdeprecation) as consumers who mirror need to update behaviors -
⛔ Removealpine-certificates
Edited by Robert Marshall