synker.yaml

# Baseline synker CI configs
# NOTE: THIS CONFIG IS PARTIAL (it is missing the `destination` component) AND ONLY USED FOR PULLING IN CI
transport:
  registry:
    hostname: localhost
    port: 25000
    osChoice: linux
    disablePolicyChecks: true
options:
  # TODO: Turn this off for now until parallel syncing is more "production" ready
  # NOTE: Finding some bugs (even with retry) in pushing images to the airgapped registry that trace back to paralell syncing
  parallelSync: false
  quiet: false
  debug: info
# NOTE: destination configurations below are environment specific and should be modified to match your environment.
destination:
  registry:
    # Hostname of the destination registry to push to
    hostname: p1-registry
    # Port of the destination registry to push to
    port: 5000
    #
    osChoice: linux
    disablePolicyChecks: true
source:
  authFile: /root/.docker/config.json
  images:
    # Include registry image
    - registry:2

    - registry1.dso.mil/ironbank/twistlock/defender/defender:20.12.531
    - registry1.dso.mil/ironbank/anchore/enterprise/enterprise:3.0.2
    - registry1.dso.mil/ironbank/anchore/enterpriseui/enterpriseui:3.0.2
    # Images used by pipeline-templates
    # NOTE: These are __not__ fully inclusive yet, see this issue for updates: https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/145
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/sonar-scanner-dotnet31:4.10
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/sonar-scanner:4.5.0.2216
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/git-kustomize203-skopeo12:8.2.276.test
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/kaniko-project-executor:debug-v1.3.0
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/skopeo-bash-git-lfs-kustomize:1.0
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/anchore:0.8.2
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/test:gcc
    - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/dependency-check611-sonar-scanner45-dotnet-31:021921
    # gitlab-runner-helper image: This image does not get captured from the release deployment
    # the gitlab-runner-helper image only gets pulled when a pipeline runs. So it must be listed here
    - registry1.dso.mil/ironbank/gitlab/gitlab-runner/gitlab-runner-helper:v13.9.0
    # Explicily add Keycloak image because Keycloak is not enabled in pipelines so the imaeg does not get pulled
    - registry.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/keycloak-ib:13.0.0-1.0.3
    # Don't include until fortify is supported
    #- registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/dotnet-fortify:20.2.0