# Baseline synker CI configs # NOTE: THIS CONFIG IS PARTIAL (it is missing the `destination` component) AND ONLY USED FOR PULLING IN CI transport: registry: hostname: localhost port: 25000 osChoice: linux disablePolicyChecks: true options: # TODO: Turn this off for now until parallel syncing is more "production" ready # NOTE: Finding some bugs (even with retry) in pushing images to the airgapped registry that trace back to paralell syncing parallelSync: false quiet: false debug: info # NOTE: destination configurations below are environment specific and should be modified to match your environment. destination: registry: # Hostname of the destination registry to push to hostname: p1-registry # Port of the destination registry to push to port: 5000 # osChoice: linux disablePolicyChecks: true source: authFile: /root/.docker/config.json images: # Include registry image - registry:2 - registry1.dso.mil/ironbank/twistlock/defender/defender:20.12.531 - registry1.dso.mil/ironbank/anchore/enterprise/enterprise:3.0.2 - registry1.dso.mil/ironbank/anchore/enterpriseui/enterpriseui:3.0.2 # Images used by pipeline-templates # NOTE: These are __not__ fully inclusive yet, see this issue for updates: https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/145 - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/sonar-scanner-dotnet31:4.10 - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/sonar-scanner:4.5.0.2216 - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/git-kustomize203-skopeo12:8.2.276.test - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/kaniko-project-executor:debug-v1.3.0 - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/skopeo-bash-git-lfs-kustomize:1.0 - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/anchore:0.8.2 - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/test:gcc - registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/dependency-check611-sonar-scanner45-dotnet-31:021921 # gitlab-runner-helper image: This image does not get captured from the release deployment # the gitlab-runner-helper image only gets pulled when a pipeline runs. So it must be listed here - registry1.dso.mil/ironbank/gitlab/gitlab-runner/gitlab-runner-helper:v13.9.0 # Explicily add Keycloak image because Keycloak is not enabled in pipelines so the imaeg does not get pulled - registry.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/keycloak-ib:13.0.0-1.0.3 # Don't include until fortify is supported #- registry.il2.dso.mil/platform-one/devops/pipeline-templates/pipeline-job/dotnet-fortify:20.2.0