rke2/scripts/build-images

115 lines
5.5 KiB
Bash
Executable File

#!/usr/bin/env bash
set -ex
cd $(dirname $0)/..
source ./scripts/version.sh
./scripts/build-image-runtime
awk '{print $1}' << EOF > build/images-core.txt
${REGISTRY}/${REPO}/${PROG}-runtime:${DOCKERIZED_VERSION}
EOF
xargs -n1 -t docker image pull --quiet << EOF >> build/images-core.txt
${REGISTRY}/rancher/hardened-kubernetes:${KUBERNETES_IMAGE_TAG}
${REGISTRY}/rancher/hardened-coredns:v1.13.1-build20251015
${REGISTRY}/rancher/hardened-cluster-autoscaler:v1.10.2-build20251015
${REGISTRY}/rancher/hardened-dns-node-cache:1.26.7-build20251016
${REGISTRY}/rancher/hardened-etcd:${ETCD_VERSION}-build20251017
${REGISTRY}/rancher/hardened-k8s-metrics-server:v0.8.0-build20251015
${REGISTRY}/rancher/hardened-addon-resizer:1.8.23-build20251016
${REGISTRY}/rancher/klipper-helm:v0.9.9-build20251021
${REGISTRY}/rancher/klipper-lb:v0.4.13
${REGISTRY}/rancher/mirrored-pause:${PAUSE_VERSION}
${REGISTRY}/rancher/mirrored-ingress-nginx-kube-webhook-certgen:v1.6.3
${REGISTRY}/rancher/nginx-ingress-controller:v1.13.3-hardened2
${REGISTRY}/rancher/rke2-cloud-provider:${CCM_VERSION}
${REGISTRY}/rancher/mirrored-sig-storage-snapshot-controller:v8.2.0
EOF
xargs -n1 -t docker image pull --quiet << EOF > build/images-traefik.txt
${REGISTRY}/rancher/hardened-traefik:v3.5.3-build20251020
EOF
xargs -n1 -t docker image pull --quiet << EOF > build/images-canal.txt
${REGISTRY}/rancher/hardened-calico:v3.30.3-build20251015
${REGISTRY}/rancher/hardened-flannel:v0.27.4-build20251015
EOF
if [ "${GOARCH}" != "s390x" ]; then
xargs -n1 -t docker image pull --quiet << EOF > build/images-cilium.txt
${REGISTRY}/rancher/mirrored-cilium-certgen:v0.2.4
${REGISTRY}/rancher/mirrored-cilium-cilium:v1.18.2
${REGISTRY}/rancher/mirrored-cilium-cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324
${REGISTRY}/rancher/mirrored-cilium-clustermesh-apiserver:v1.18.2
${REGISTRY}/rancher/mirrored-cilium-hubble-relay:v1.18.2
${REGISTRY}/rancher/mirrored-cilium-hubble-ui:v0.13.3
${REGISTRY}/rancher/mirrored-cilium-hubble-ui-backend:v0.13.3
${REGISTRY}/rancher/mirrored-cilium-operator-aws:v1.18.2
${REGISTRY}/rancher/mirrored-cilium-operator-azure:v1.18.2
${REGISTRY}/rancher/mirrored-cilium-operator-generic:v1.18.2
${REGISTRY}/rancher/hardened-cni-plugins:v1.8.0-build20251014
EOF
xargs -n1 -t docker image pull --quiet << EOF > build/images-calico.txt
${REGISTRY}/rancher/mirrored-calico-operator:v1.38.6
${REGISTRY}/rancher/mirrored-calico-ctl:v3.30.3
${REGISTRY}/rancher/mirrored-calico-kube-controllers:v3.30.3
${REGISTRY}/rancher/mirrored-calico-typha:v3.30.3
${REGISTRY}/rancher/mirrored-calico-node:v3.30.3
${REGISTRY}/rancher/mirrored-calico-pod2daemon-flexvol:v3.30.3
${REGISTRY}/rancher/mirrored-calico-cni:v3.30.3
${REGISTRY}/rancher/mirrored-calico-apiserver:v3.30.3
${REGISTRY}/rancher/mirrored-calico-csi:v3.30.3
${REGISTRY}/rancher/mirrored-calico-node-driver-registrar:v3.30.3
${REGISTRY}/rancher/mirrored-calico-envoy-gateway:v3.30.3
${REGISTRY}/rancher/mirrored-calico-envoy-proxy:v3.30.3
${REGISTRY}/rancher/mirrored-calico-envoy-ratelimit:v3.30.3
${REGISTRY}/rancher/mirrored-calico-goldmane:v3.30.3
${REGISTRY}/rancher/mirrored-calico-whisker:v3.30.3
${REGISTRY}/rancher/mirrored-calico-whisker-backend:v3.30.3
EOF
if [ "${GOARCH}" != "arm64" ]; then
xargs -n1 -t docker image pull --quiet << EOF > build/images-vsphere.txt
${REGISTRY}/rancher/mirrored-cloud-provider-vsphere:v1.34.0
${REGISTRY}/rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.5.0
${REGISTRY}/rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.5.0
${REGISTRY}/rancher/mirrored-sig-storage-csi-node-driver-registrar:v2.13.0
${REGISTRY}/rancher/mirrored-sig-storage-csi-resizer:v1.12.0
${REGISTRY}/rancher/mirrored-sig-storage-livenessprobe:v2.15.0
${REGISTRY}/rancher/mirrored-sig-storage-csi-attacher:v4.8.1
${REGISTRY}/rancher/mirrored-sig-storage-csi-provisioner:v4.0.1
${REGISTRY}/rancher/mirrored-sig-storage-csi-snapshotter:v8.2.0
EOF
fi
xargs -n1 -t docker image pull --quiet << EOF > build/images-multus.txt
${REGISTRY}/rancher/hardened-multus-cni:v4.2.2-build20251015
${REGISTRY}/rancher/hardened-multus-thick:v4.2.2-build20251015
${REGISTRY}/rancher/hardened-multus-dynamic-networks-controller:v0.3.7-build20250711
${REGISTRY}/rancher/hardened-cni-plugins:v1.8.0-build20251014
${REGISTRY}/rancher/hardened-whereabouts:v0.9.2-build20251015
${REGISTRY}/rancher/mirrored-library-busybox:1.36.1
EOF
xargs -n1 -t docker image pull --quiet << EOF > build/images-harvester.txt
${REGISTRY}/rancher/harvester-cloud-provider:v0.2.5
${REGISTRY}/rancher/mirrored-kube-vip-kube-vip-iptables:v0.9.2
${REGISTRY}/rancher/harvester-csi-driver:v0.2.4
${REGISTRY}/rancher/mirrored-longhornio-csi-node-driver-registrar:v2.3.0
${REGISTRY}/rancher/mirrored-longhornio-csi-resizer:v1.2.0
${REGISTRY}/rancher/mirrored-longhornio-csi-provisioner:v5.3.0-20250709
${REGISTRY}/rancher/mirrored-longhornio-csi-attacher:v3.2.1
${REGISTRY}/rancher/mirrored-longhornio-csi-snapshotter:v8.3.0-20250709
EOF
xargs -n1 -t docker image pull --quiet << EOF > build/images-flannel.txt
${REGISTRY}/rancher/hardened-flannel:v0.27.4-build20251015
${REGISTRY}/rancher/hardened-cni-plugins:v1.8.0-build20251014
EOF
fi
# Continue to provide a legacy airgap archive set with the default CNI images
cat build/images-core.txt build/images-canal.txt > build/images.txt