mirror of
https://github.com/goharbor/harbor.git
synced 2024-11-06 18:50:09 +01:00
28e0c0693b
1. Upgrade clair adapter to v1.0.0. 2. Make the clair adapter which installed by harbor immutable and using internal registry address. 3. Add support to build clair adapter image from binary. 4. Switch to ScannerPull action when make authorization for the scan request. Signed-off-by: He Weiwei <hweiwei@vmware.com>
62 lines
2.6 KiB
Python
62 lines
2.6 KiB
Python
import os
|
|
|
|
from g import templates_dir
|
|
from .configs import parse_versions
|
|
from .jinja import render_jinja
|
|
|
|
docker_compose_template_path = os.path.join(templates_dir, 'docker_compose', 'docker-compose.yml.jinja')
|
|
docker_compose_yml_path = '/compose_location/docker-compose.yml'
|
|
|
|
# render docker-compose
|
|
def prepare_docker_compose(configs, with_clair, with_notary, with_chartmuseum):
|
|
versions = parse_versions()
|
|
VERSION_TAG = versions.get('VERSION_TAG') or 'dev'
|
|
REGISTRY_VERSION = versions.get('REGISTRY_VERSION') or 'v2.7.1-patch-2819-2553'
|
|
NOTARY_VERSION = versions.get('NOTARY_VERSION') or 'v0.6.1'
|
|
CLAIR_VERSION = versions.get('CLAIR_VERSION') or 'v2.0.9'
|
|
CLAIR_ADAPTER_VERSION = versions.get('CLAIR_ADAPTER_VERSION') or 'v1.0.0'
|
|
CHARTMUSEUM_VERSION = versions.get('CHARTMUSEUM_VERSION') or 'v0.9.0'
|
|
|
|
rendering_variables = {
|
|
'version': VERSION_TAG,
|
|
'reg_version': "{}-{}".format(REGISTRY_VERSION, VERSION_TAG),
|
|
'redis_version': VERSION_TAG,
|
|
'notary_version': '{}-{}'.format(NOTARY_VERSION, VERSION_TAG),
|
|
'clair_version': '{}-{}'.format(CLAIR_VERSION, VERSION_TAG),
|
|
'clair_adapter_version': '{}-{}'.format(CLAIR_ADAPTER_VERSION, VERSION_TAG),
|
|
'chartmuseum_version': '{}-{}'.format(CHARTMUSEUM_VERSION, VERSION_TAG),
|
|
'data_volume': configs['data_volume'],
|
|
'log_location': configs['log_location'],
|
|
'protocol': configs['protocol'],
|
|
'http_port': configs['http_port'],
|
|
'registry_custom_ca_bundle_path': configs['registry_custom_ca_bundle_path'],
|
|
'external_redis': configs['external_redis'],
|
|
'external_database': configs['external_database'],
|
|
'with_notary': with_notary,
|
|
'with_clair': with_clair,
|
|
'with_chartmuseum': with_chartmuseum
|
|
}
|
|
|
|
# for gcs
|
|
storage_config = configs.get('storage_provider_config') or {}
|
|
if storage_config.get('keyfile') and configs['storage_provider_name'] == 'gcs':
|
|
rendering_variables['gcs_keyfile'] = storage_config['keyfile']
|
|
|
|
# for http
|
|
if configs['protocol'] == 'https':
|
|
rendering_variables['cert_key_path'] = configs['cert_key_path']
|
|
rendering_variables['cert_path'] = configs['cert_path']
|
|
rendering_variables['https_port'] = configs['https_port']
|
|
|
|
# for uaa
|
|
uaa_config = configs.get('uaa') or {}
|
|
if uaa_config.get('ca_file'):
|
|
rendering_variables['uaa_ca_file'] = uaa_config['ca_file']
|
|
|
|
# for log
|
|
log_ep_host = configs.get('log_ep_host')
|
|
if log_ep_host:
|
|
rendering_variables['external_log_endpoint'] = True
|
|
|
|
render_jinja(docker_compose_template_path, docker_compose_yml_path, mode=0o644, **rendering_variables)
|