Merge branch 'add-renovate' into 'development'

Add renovate

See merge request !2

Dockerfile

@@ -3,33 +3,23 @@
 ARG BASE_REGISTRY=nexus-docker-secure.levelup-dev.io
 ARG BASE_IMAGE=redhat/ubi/ubi8
 ARG BASE_TAG=8.2
-###############################################################
+
+FROM istio/istioctl:1.5.4 AS base
+
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
-###############################################################
-# Provide label information
-LABEL name="istio-istioctl" \
-      maintainer="gavin.scallon@parsons.com" \
-      vendor="Open Source" \
-      version="1.5.0" \
-      release="1" \
-      summary="Istio configuration command line utility" \
-      description="Istio configuration command line utility for service operators to debug and diagnose their Istio mesh."
 
-###############################################################
-# untar istioctl. Then copy the executable to /usr/local/bin
-COPY istioctl-1.5.4-linux.tar.gz /
-
-RUN tar -xzf istioctl-1.5.4-linux.tar.gz && \
-    cp -f istioctl /usr/local/bin && \
-    chmod +x /usr/local/bin/istioctl && \
-    chown 1000:1000 /usr/local/bin/istioctl && \
-    rm -f istioctl-1.5.4-linux.tar.gz 
-
-RUN dnf update -y && \
-    dnf upgrade -y && \
-    dnf clean all && \
-    rm -rf /var/cache/dnf/
-###############################################################
-# Run as another user and set entrypoint
+LABEL org.opencontainers.image.title="istioctl" \
+      org.opencontainers.image.description="Istio configuration command line utility." \
+      org.opencontainers.image.licenses="Apache-2.0" \
+      org.opencontainers.image.url="https://istio.io" \
+      org.opencontainers.image.version="1.5.4" \
+      maintainer="cht@dsop.io"
+
+COPY --from=base /usr/local/bin/istioctl /usr/local/bin/istioctl
+
 USER 1000
+
+HEALTHCHECK --interval=1m --start-period=30s CMD version --remote=false
+
 ENTRYPOINT ["/usr/local/bin/istioctl"]
+

README.md

 # istioctl-1.5
 
-## Version 1.5.4
-
 istioctl allows you to install and configure an Istio mesh for production use or for evaluation purposes. istioctl is a command line tool which provides customization of the Istio control plane and of the sidecars for the Istio data plane. It has user input validation to help prevent installation errors and customization options to override any aspect of the configuration.
 
 The default method for installing and configuring the Istio service mesh used to be done with Helm 2.x. However, this method is now discouraged and Istio instead encourages developers to install using istioctl or the Istio Operator. istioctl can utilize the Operator and you will need to use the Iron Bank hardened istioctl container in the Operator deployment. 

download.yaml

 ---
 resources:
-  - url: "https://github.com/istio/istio/releases/download/1.5.4/istioctl-1.5.4-linux.tar.gz"
-    filename: istioctl-1.5.4-linux.tar.gz
-    validation:
-      type: sha256
-      value: c9062ae88337ca08cd17d83084f7de3814da9911554c32c248f06b1f08e83660
+  - url: "docker://docker.io/istio/istioctl@sha256:87320a15cc52dcde1e8afb5c0608d43b621311ab39c5a06919917f0e740e9e08"
+    tag: "istio/istioctl:1.5.4"
+

renovate.json

+{
+    "assignees": ["@gavin.scallon"],
+    "baseBranches": ["development"],
+    "packageRules": [
+      {
+        "datasources": ["docker"],
+        "packageNames": ["istio/istioctl"],
+        "separateMinorPatch": true,
+        "minor": {
+          "enabled": false
+        }
+      }
+    ],
+    "regexManagers": [
+      {
+        "fileMatch": ["^Dockerfile$"],
+        "matchStrings": [
+          "version=\"(?<currentValue>.*?)\""
+        ],
+        "depNameTemplate": "istio/istioctl",
+        "datasourceTemplate": "docker"
+      },
+      {
+        "fileMatch": ["^Jenkinsfile$"],
+        "matchStrings": [
+          "version:\\s+\"(?<currentValue>.*?)\""
+        ],
+        "depNameTemplate": "istio/istioctl",
+        "datasourceTemplate": "docker"
+      }
+    ]
+  }
+  
\ No newline at end of file

[jenkins-gitlab]

Pipeline Status: SUCCESS
Branch: development

graph LR
  0([setup]):::INTERNAL_SUCCESS --> 1([Import Artifacts]):::SUCCESS --> 2((/)):::INTERNAL_SUCCESS --> 3([Stage Artifacts]):::SUCCESS --> 4((/)):::INTERNAL_SUCCESS --> 5([Build]):::SUCCESS --> 6([Publish, Scan & Report]):::INTERNAL_NOT_BUILT

classDef SUCCESS font-size:10px
classDef FAILURE fill:#f44, font-size:10px
classDef SKIPPED font-size:10px
classDef ABORTED fill:#889, font-size:10px
classDef INTERNAL_SUCCESS font-size:10px, stroke-dasharray: 2, 1
classDef INTERNAL_FAILURE fill:#f44, font-size:10px, stroke-dasharray: 2, 1
classDef INTERNAL_SKIPPED font-size:10px, stroke-dasharray: 2, 1
classDef INTERNAL_ABORTED fill:#889, font-size:10px, stroke-dasharray: 2, 1