Merge branch 'hardening_manifest' into 'development'

Migrate to hardening_manifest.yaml

See merge request !4

Dockerfile

@@ -4,19 +4,10 @@ ARG BASE_IMAGE=ubi8
 ARG BASE_TAG=8.3
 FROM kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c AS base
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
-
 # Label
-LABEL org.opencontainers.image.title="admission-webhook" \
-      org.opencontainers.image.description="admission-webhook v20190520-v0-139-gcee39dbc-dirty-0d8f4c container based off UBI 8" \
-      org.opencontainers.image.licenses="Apache-2.0" \
-      org.opencontainers.image.url="gcr.io/kubeflow-images-public/admission-webhook@sha256:82f41fd8878ead19616b577c537d2ff83ea576b78478b2f8819caa83eeac0ee0" \
-      org.opencontainers.image.version="v20190520-v0-139-gcee39dbc-dirty-0d8f4c" \
-      maintainer="karol.stolarski@annoai.com" 
 ENV LANG C.UTF-8
-
 RUN mkdir -p /app
 COPY --from=base /webhook /app
-
 RUN dnf upgrade -y && \
       dnf clean all && \
       rm -rf /var/cache/dnf
@@ -26,6 +17,4 @@ RUN find / -path /proc -prune -o -perm /2000 -exec chmod g-s {} \;
 RUN chown -R kf /app
 USER kf
 WORKDIR /app
-
 ENTRYPOINT [ "./webhook" ]
-HEALTHCHECK CMD ps | grep webhook | grep -v grep
\ No newline at end of file

Jenkinsfile

-@Library('DCCSCR@master') _
-dccscrPipeline(version: '82f41fd8878e')

download.yaml

----
-resources:
-  - url: "docker://gcr.io/kubeflow-images-public/admission-webhook@sha256:82f41fd8878ead19616b577c537d2ff83ea576b78478b2f8819caa83eeac0ee0"
-    tag: "kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c"
-
-

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "kubeflow/admission-webhook/admission-webhook-82f41fd8878e"
+tags:
+- "82f41fd8878e"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi8"
+  BASE_TAG: "8.3"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "admission-webhook-82f41fd8878e"
+  org.opencontainers.image.description: "admission-webhook container for kubeflow 1.0.2 based on UBI 8 baase imaage"
+  org.opencontainers.image.licenses: "Apache-2.0"
+  org.opencontainers.image.url: "gcr.io/kubeflow-images-public/admission-webhook@sha256:82f41fd8878ead19616b577c537d2ff83ea576b78478b2f8819caa83eeac0ee0"
+  org.opencontainers.image.vendor: "kubeflow"
+  org.opencontainers.image.version: "82f41fd8878e"
+  mil.dso.ironbank.image.keywords: "kubeflow,admission-webhook,"
+  mil.dso.ironbank.image.type: "opensource"
+  mil.dso.ironbank.product.name: "kubeflow"
+
+resources:
+- tag: kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c
+  url: docker://gcr.io/kubeflow-images-public/admission-webhook@sha256:82f41fd8878ead19616b577c537d2ff83ea576b78478b2f8819caa83eeac0ee0
+
+maintainers:
+- email: "cvernooy@oteemo.com"
+  name: "Christopher Vernooy"
+  username: "cvernooy"
+  cht_member: true 
+