diff --git a/developer-docs/artifacts/README.md b/developer-docs/artifacts/README.md new file mode 100644 index 0000000000..e1c99f25c3 --- /dev/null +++ b/developer-docs/artifacts/README.md @@ -0,0 +1,16 @@ +# Sources + +This directory contains documentation on the artifacts used to build, release, test, and run RKE2. +The general idea is to give developers a way to quickly reference the list of artifacts without having to dig through the multiple codebases. + +## Example use cases + +### CVE scanning + +- you might use this to cross reference CVE scans made on container images to find a list of binaries that need to be updated +- you might use this to cross reference CVE scans made on container images to find the impact of the CVE on the RKE2 project + +### Hidden Dependencies + +sometimes how things are built is not always clear in the codebase, this can be used to find hidden dependencies +- you might need to understand the build process for a helm chart to understand how we patch them from upstream for RKE2 diff --git a/developer-docs/artifacts/binaries.md b/developer-docs/artifacts/binaries.md new file mode 100644 index 0000000000..92eac7acda --- /dev/null +++ b/developer-docs/artifacts/binaries.md @@ -0,0 +1,86 @@ +# Binary + +This document describes the Go binaries that are used in RKE2 and how they are built. + +| Binary | Containers | Dependencies | Build Tool | External Build | +| ------ | :--------- | ------------ | ---------- | -------------- | +runc | - [rancher/hardened-runc](https://hub.docker.com/r/rancher/hardened-runc/tags) ([built](https://github.com/rancher/image-build-runc/blob/master/Dockerfile#LL24C70-L24C81))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags) ([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L132)) | [opencontainers/runc](https://github.com/opencontainers/runc/blob/main/go.mod) | [make](https://github.com/opencontainers/runc/blob/main/Makefile#L68) +crictl | - [rancher/hardened-crictl](https://hub.docker.com/r/rancher/hardened-crictl/tags) ([built](https://github.com/rancher/image-build-crictl/blob/master/Dockerfile#LL24C5-L24C83))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags) ([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L131)) | [kubernetes-sigs/cri-tools](https://github.com/kubernetes-sigs/cri-tools/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +containerd | - [rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags)([built](https://github.com/rancher/image-build-containerd/blob/master/Dockerfile#LL44C1-L49C102))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags)([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L130)) | [k3s-io/containerd](https://github.com/k3s-io/containerd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +containerd-shim | - [rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags)([built](https://github.com/rancher/image-build-containerd/blob/master/Dockerfile#LL44C1-L49C102))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags)([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L143)) | [k3s-io/containerd](https://github.com/k3s-io/containerd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +containerd-shim-runc-v1 | - [rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags)([built](https://github.com/rancher/image-build-containerd/blob/master/Dockerfile#LL44C1-L49C102))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags)([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L144)) | [k3s-io/containerd](https://github.com/k3s-io/containerd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +containerd-shim-runc-v2 | - [rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags)([built](https://github.com/rancher/image-build-containerd/blob/master/Dockerfile#LL44C1-L49C102))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags)([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L145)) | [k3s-io/containerd](https://github.com/k3s-io/containerd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +ctr | - [rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags)([built](https://github.com/rancher/image-build-containerd/blob/master/Dockerfile#LL44C1-L49C102))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags)([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L146)) | [k3s-io/containerd](https://github.com/k3s-io/containerd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +kubectl | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([built](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL63C18-L63C79))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags)([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L149)) | [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +kubelet | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([built](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL63C18-L63C79))
- [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags)([copied](https://github.com/rancher/rke2/blob/master/Dockerfile#L150)) | [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +containerd-stress | - [rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags)([built](https://github.com/rancher/image-build-containerd/blob/master/Dockerfile#LL44C1-L49C102)) | [k3s-io/containerd](https://github.com/k3s-io/containerd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +ipset | - [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([copied](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L4))
- [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([copied](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL59C24-L59C57)) | [buildroot ipset config](https://github.com/buildroot/buildroot/tree/master/package/ipset) | [buildroot](https://github.com/k3s-io/k3s-root/blob/master/scripts/download#L10) | [k3s-io/root](https://github.com/k3s-io/k3s-root/blob/master/scripts/build#L11) +ebtablesd | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([copied](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL59C24-L59C57))
- [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L35))
- [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([copied](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L4))
- [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags)([copied](https://github.com/rancher/image-build-flannel/blob/master/Dockerfile#L16)) | [buildroot ebtables config](https://github.com/buildroot/buildroot/blob/master/package/ebtables/ebtables.mk#LL44C62-L44C62) | [buildroot](https://github.com/k3s-io/k3s-root/blob/master/scripts/download#L10) | [k3s-io/root](https://github.com/k3s-io/k3s-root/blob/master/scripts/build#L11) +ebtablesu | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L35))
- [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L35))
- [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([copied](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L4))
- [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags)([copied](https://github.com/rancher/image-build-flannel/blob/master/Dockerfile#L16)) | [buildroot ebtables config](https://github.com/buildroot/buildroot/blob/master/package/ebtables/ebtables.mk#LL44C62-L44C62) | [buildroot](https://github.com/k3s-io/k3s-root/blob/master/scripts/download#L10) | [k3s-io/root](https://github.com/k3s-io/k3s-root/blob/master/scripts/build#L11) +iptables-apply | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([copied](https://github.com/k3s-io/k3s-root/releases))
- [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L35))
- [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([copied](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L4))
- [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags)([copied](https://github.com/rancher/image-build-flannel/blob/master/Dockerfile#L16)) | [buildroot iptables config](https://github.com/buildroot/buildroot/blob/master/package/iptables/iptables.mk#L3) | [buildroot](https://github.com/k3s-io/k3s-root/blob/master/scripts/download#L10) | [k3s-io/root](https://github.com/k3s-io/k3s-root/blob/master/scripts/build#L11) +xtables-legacy-multi | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([copied](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL59C24-L59C57))
- [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L35))
- [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([copied](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L4))
- [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags)([copied](https://github.com/rancher/image-build-flannel/blob/master/Dockerfile#L16)) | [buildroot xtables-addons config](https://github.com/buildroot/buildroot/blob/bab89b35f018a332c7d42ed6e6cb8d72fdeac4b2/package/xtables-addons/xtables-addons.mk#L3) | [buildroot](https://github.com/k3s-io/k3s-root/blob/master/scripts/download#L10) | [k3s-io/root](https://github.com/k3s-io/k3s-root/blob/master/scripts/build#L11) +xtables-nft-multi | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([copied](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL59C24-L59C57))
- [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L35))
- [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([copied](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L4))
- [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags)([copied](https://github.com/rancher/image-build-flannel/blob/master/Dockerfile#L16)) | [buildroot xtables-addons config](https://github.com/buildroot/buildroot/blob/bab89b35f018a332c7d42ed6e6cb8d72fdeac4b2/package/xtables-addons/xtables-addons.mk#L3) | [buildroot](https://github.com/k3s-io/k3s-root/blob/master/scripts/download#L10) | [k3s-io/root](https://github.com/k3s-io/k3s-root/blob/master/scripts/build#L11) +kube-apiserver | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([built](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL63C18-L63C79)) | [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +kube-controller-manager | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([built](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL63C18-L63C79)) | [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +kube-scheduler | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([built](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL63C18-L63C79)) | [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +kube-proxy | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([built](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL63C18-L63C79)) | [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +kubeadm | - [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([built](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL63C18-L63C79)) | [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +rke2 | - [rancher/rke2-upgrade](https://hub.docker.com/r/rancher/rke2-upgrade/tags)([copied](https://github.com/rancher/rke2-upgrade/blob/master/Dockerfile#LL12C69-L12C99))
- [rancher/system-agent-installer-rke2](https://hub.docker.com/r/rancher/system-agent-installer-rke2)([copied](https://github.com/rancher/system-agent-installer-rke2/blob/main/scripts/download#L16)) | [rancher/rke2](https://github.com/rancher/rke2/blob/master/go.mod) | [rancher/rke2/scripts/build-binary](https://github.com/rancher/rke2/blob/master/scripts/build-binary#LL47C26-L47C36) | [rancher/rke2](https://github.com/rancher/rke2/blob/master/Makefile#L20) +runit | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L153)) | runit's make file | using make +ebtables-legacy | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L35))
- [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([copied](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L4))
- [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags)([copied](https://github.com/rancher/image-build-flannel/blob/master/Dockerfile#L16))
- [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags)([copied](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#LL59C24-L59C57)) | [buildroot ebtables config](https://github.com/buildroot/buildroot/blob/master/package/ebtables/ebtables.mk#L22) | [buildroot](https://github.com/k3s-io/k3s-root/blob/master/scripts/download#L10) | [k3s-io/root](https://github.com/k3s-io/k3s-root/blob/master/scripts/build#L11) +bird | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L164)) | [create_binaries.sh](https://github.com/projectcalico/bird/blob/feature-ipinip/create_binaries.sh#L65) | gcc | make +bird6 | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L164)) | [create_binaries.sh](https://github.com/projectcalico/bird/blob/feature-ipinip/create_binaries.sh#L58) | gcc | make +birdcl | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L164)) | [create_binaries.sh](https://github.com/projectcalico/bird/blob/feature-ipinip/create_binaries.sh#L58) | gcc | make +birdcl6 | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([copied](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L164)) | [create_binaries.sh](https://github.com/projectcalico/bird/blob/feature-ipinip/create_binaries.sh#L58) | gcc | make +calicoctl | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L47)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +calico | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L68)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +calico-ipam | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L68)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +install (calico cni plugin) | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L68)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +calico-node | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L90)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go build](https://pkg.go.dev/cmd/go#hdr-Compile_packages_and_dependencies) tool +flexvoldriver | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L116)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +kube-controllers | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L127)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +check-status | - [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags)([built](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L130)) | [projectcalico/calico](https://github.com/projectcalico/calico/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +bandwidth | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +bridge | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +dhcp | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +dummy | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +firewall | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +host-device | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +host-local | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +ipvlan | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +loopback | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +macvlan | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +portmap | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +ptp | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +sbr | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +static | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +tuning | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +vlan | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +vrf | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L18)) | [containernetworking/plugins](https://github.com/containernetworking/plugins/blob/main/go.mod) | [build_linux.sh](https://github.com/containernetworking/plugins/blob/main/build_linux.sh#L20) +flannel | - [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags)([built](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L28)) | [flannel-io/cni-plugin](https://github.com/flannel-io/cni-plugin/blob/main/go.mod) | [build_flannel.sh](https://github.com/flannel-io/cni-plugin/blob/main/scripts/build_flannel.sh) +cluster-proportional-autoscaler | - [rancher/hardened-cluster-autoscaler](https://hub.docker.com/r/rancher/hardened-cluster-autoscaler/tags)([built](https://github.com/rancher/image-build-coredns/blob/master/Dockerfile#L46)) | [kubernetes-sig/cluster-proportional-autoscaler](https://github.com/kubernetes-sigs/cluster-proportional-autoscaler/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +coredns | - [rancher/hardened-coredns](https://hub.docker.com/r/rancher/hardened-coredns/tags)([built](https://github.com/rancher/image-build-coredns/blob/master/Dockerfile#L26)) | [coredns/coredns](https://github.com/coredns/coredns/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +node-cache | - [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags)([built](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L33)) | [kubernetes/dns](https://github.com/kubernetes/dns/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +etcd | - [rancher/hardened-etcd](https://hub.docker.com/r/rancher/hardened-etcd/tags)([built](https://github.com/rancher/image-build-etcd/blob/master/Dockerfile#L27)) | [k3s-io/etcd go.mod](https://github.com/k3s-io/etcd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +etcdctl | - [rancher/hardened-etcd](https://hub.docker.com/r/rancher/hardened-etcd/tags)([built](https://github.com/rancher/image-build-etcd/blob/master/Dockerfile#L27)) | [k3s-io/etcd go.mod](https://github.com/k3s-io/etcd/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +flanneld | - [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags)([built](https://github.com/rancher/image-build-flannel/blob/master/Dockerfile#L27)) | [flannel-io/flannel](https://github.com/flannel-io/flannel/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +ib-sriov | - [rancher/hardened-ib-sriov-cni](https://hub.docker.com/r/rancher/hardened-ib-sriov-cni/tags)([built](https://github.com/rancher/image-build-ib-sriov-cni/blob/main/Dockerfile#L16)) | [k8snetworkingplumbingwg/ib-sriov-cni go.mod](https://github.com/k8snetworkplumbingwg/ib-sriov-cni/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/ib-sriov-cni/blob/master/Makefile#L63) +metrics-server | - [rancher/hardened-k8s-metrics-server](https://hub.docker.com/r/rancher/hardened-k8s-metrics-server/tags)([built](https://github.com/rancher/image-build-k8s-metrics-server/blob/master/Dockerfile#L35)) | [kubernetes-sigs/metrics-server go.mod](https://github.com/kubernetes-sigs/metrics-server/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +multus | - [rancher/hardened-multus-cni](https://hub.docker.com/r/rancher/hardened-multus-cni/tags)([built](https://github.com/rancher/image-build-multus/blob/main/Dockerfile#L18)) | [k8snetworkplumbingwg/multus-cni go.mod](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/go.mod) | [hack/build-go.sh](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/hack/build-go.sh) +multus-daemon | - [rancher/hardened-multus-cni](https://hub.docker.com/r/rancher/hardened-multus-cni/tags)([built](https://github.com/rancher/image-build-multus/blob/main/Dockerfile#L18)) | [k8snetworkplumbingwg/multus-cni go.mod](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/go.mod) | [hack/build-go.sh](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/hack/build-go.sh) +generate-kubeconfig | - [rancher/hardened-multus-cni](https://hub.docker.com/r/rancher/hardened-multus-cni/tags)([built](https://github.com/rancher/image-build-multus/blob/main/Dockerfile#L18)) | [k8snetworkplumbingwg/multus-cni go.mod](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/go.mod) | [hack/build-go.sh](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/hack/build-go.sh) +rke2-cloud-provider | - [rancher/rke2-cloud-provider](https://hub.docker.com/r/rancher/rke2-cloud-provider/tags)([built](https://github.com/rancher/image-build-rke2-cloud-provider/blob/main/Dockerfile#L18)) | [rancher/image-build-rke2-cloud-provider go.mod](https://github.com/rancher/image-build-rke2-cloud-provider/blob/main/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +sriov | - [rancher/hardened-sriov-cni](https://hub.docker.com/r/rancher/hardened-sriov-cni/tags)([built](https://github.com/rancher/image-build-sriov-cni/blob/main/Dockerfile#L16)) | [k8snetworkplumbingwg/sriov-cni go mod](https://github.com/k8snetworkplumbingwg/sriov-cni/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/sriov-cni/blob/master/Makefile#L54) +sriovdp | - [rancher/hardened-sriov-network-device-plugin](https://hub.docker.com/r/rancher/hardened-sriov-network-device-plugin/tags)([built](https://github.com/rancher/image-build-sriov-network-device-plugin/blob/main/Dockerfile#L16)) | [k8snetworkplumbingwg/sriov-network-device-plugin go mod](https://github.com/k8snetworkplumbingwg/sriov-network-device-plugin/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/sriov-network-device-plugin/blob/master/Makefile#L70) +webhook (sriov-operator) | - [rancher/hardened-sriov-network-webhook](https://hub.docker.com/r/rancher/hardened-sriov-network-webhook/tags)([built](https://github.com/rancher/image-build-sriov-operator/blob/main/Dockerfile.amd64#L25)) | [k8snetworkplumbingwg/sriov-network-operator go mod](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/Makefile#L63) to call [hack/build-go.sh](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/hack/build-go.sh#L40) which uses `go build` +webhook (network-resources-injector) | - [rancher/hardened-sriov-network-resources-injector](https://hub.docker.com/r/rancher/hardened-sriov-network-resources-injector/tags)([built](https://github.com/rancher/image-build-sriov-network-resources-injector/blob/main/Dockerfile#L14)) | [k8snetworkplumbingwg/network-resources-injector go mod](https://github.com/k8snetworkplumbingwg/network-resources-injector/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/network-resources-injector/blob/master/Makefile#L18) to call [build.sh](https://github.com/k8snetworkplumbingwg/network-resources-injector/blob/master/scripts/build.sh) which then uses [go install](https://go.dev/ref/mod#go-install) +installer (network-resources-injector) | - [rancher/hardened-sriov-network-resources-injector](https://hub.docker.com/r/rancher/hardened-sriov-network-resources-injector/tags)([built](https://github.com/rancher/image-build-sriov-network-resources-injector/blob/main/Dockerfile#L14)) | [k8snetworkplumbingwg/network-resources-injector go mod](https://github.com/k8snetworkplumbingwg/network-resources-injector/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/network-resources-injector/blob/master/Makefile#L18) to call [build.sh](https://github.com/k8snetworkplumbingwg/network-resources-injector/blob/master/scripts/build.sh) which then uses [go install](https://go.dev/ref/mod#go-install) +manager (sriov-operator) | - [rancher/hardened-sriov-network-operator](https://hub.docker.com/r/rancher/hardened-sriov-network-operator/tags)([built](https://github.com/rancher/image-build-sriov-operator/blob/main/Dockerfile.amd64#L24)) | [k8snetworkplumbingwg/sriov-network-operator go mod](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/Makefile#L63) to call [hack/build-go.sh](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/hack/build-go.sh#L40) which uses `go build` +sriov-network-config-daemon | - [rancher/hardened-sriov-network-config-daemon](https://hub.docker.com/r/rancher/hardened-sriov-network-config-daemon/tags)([built](https://github.com/rancher/image-build-sriov-operator/blob/main/Dockerfile.amd64#L26)) | [k8snetworkplumbingwg/sriov-network-operator go mod](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/go.mod) | [make](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/Makefile#L63) to call [hack/build-go.sh](https://github.com/k8snetworkplumbingwg/sriov-network-operator/blob/master/hack/build-go.sh#L40) which uses `go build` +whereabouts | - [rancher/hardened-whereabouts](https://hub.docker.com/r/rancher/hardened-whereabouts/tags)([built](https://github.com/rancher/image-build-whereabouts/blob/main/Dockerfile#L21)) | [k8snetworkplumbingwg/whereabouts go mod](https://github.com/k8snetworkplumbingwg/whereabouts/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +ip-control-loop | - [rancher/hardened-whereabouts](https://hub.docker.com/r/rancher/hardened-whereabouts/tags)([built](https://github.com/rancher/image-build-whereabouts/blob/main/Dockerfile#L22)) | [k8snetworkplumbingwg/whereabouts go mod](https://github.com/k8snetworkplumbingwg/whereabouts/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +nfd-master | - [rancher/hardened-node-feature-discovery](https://hub.docker.com/r/rancher/hardened-node-feature-discovery/tags) ([build](https://github.com/rancher/image-build-node-feature-discovery/blob/main/Dockerfile#L33)) | [kubernetes-sigs/node-feature-discovery go mod](https://github.com/kubernetes-sigs/node-feature-discovery/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +nfd-topology-gc | - [rancher/hardened-node-feature-discovery](https://hub.docker.com/r/rancher/hardened-node-feature-discovery/tags)([built](https://github.com/rancher/image-build-node-feature-discovery/blob/main/Dockerfile#L33)) | [kubernetes-sigs/node-feature-discovery go mod](https://github.com/kubernetes-sigs/node-feature-discovery/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +nfd-topology-updater | - [rancher/hardened-node-feature-discovery](https://hub.docker.com/r/rancher/hardened-node-feature-discovery/tags)([built](https://github.com/rancher/image-build-node-feature-discovery/blob/main/Dockerfile#L33)) | [kubernetes-sigs/node-feature-discovery go mod](https://github.com/kubernetes-sigs/node-feature-discovery/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +nfd-worker | - [rancher/hardened-node-feature-discovery](https://hub.docker.com/r/rancher/hardened-node-feature-discovery/tags)([built](https://github.com/rancher/image-build-node-feature-discovery/blob/main/Dockerfile#L33)) | [kubernetes-sigs/node-feature-discovery go mod](https://github.com/kubernetes-sigs/node-feature-discovery/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) +grpc_health_probe | - [rancher/hardened-node-feature-discovery](https://hub.docker.com/r/rancher/hardened-node-feature-discovery/tags)([built](https://github.com/rancher/image-build-node-feature-discovery/blob/main/Dockerfile#L13)) | [grpc-ecosystem/grpc-health-probe go mod](https://github.com/grpc-ecosystem/grpc-health-probe/blob/master/go.mod) | [go-build-static.sh](https://github.com/rancher/image-build-base/blob/master/scripts/go-build-static.sh) diff --git a/developer-docs/artifacts/charts.md b/developer-docs/artifacts/charts.md new file mode 100644 index 0000000000..5fd5e557bb --- /dev/null +++ b/developer-docs/artifacts/charts.md @@ -0,0 +1,63 @@ +# Charts + +This document lists all of the charts used by RKE2. +The goal is to list the charts, their source, and the images they use. +If you find a chart that is not listed here, please open a PR to add it. +If you find an image from a chart that is not listed here, please open a PR to add it. + +- The **Chart** column indicates the Helm chart that uses this image. +- The **Chart Repo** column indicates the repository that builds the chart. +- The **Upstream Chart** column indicates the upstream chart that the chart is based on. +- The **Image** column indicated the image used by the chart. +- The **Image Repo** column indicates the repository that builds the chart. +- The **Base** column indicates the image that the image is based on. +- The **Hardened** column indicates if the image is considered hardened by Rancher's standards. + + +| Chart | Chart Repo | Upstream Chart | Image | Image Repo | Base | Hardened | +| ----- | ---------- | -------------- | ----- | ---------- | ---- | -------- | +| rke2-coredns | | | rancher/hardened-cluster-autoscaler | rancher/image-build-coredns | bci | TRUE | +| rke2-coredns | | | rancher/hardened-coredns | rancher/image-build-coredns | bci | TRUE | +| rke2-coredns | | | rancher/hardened-dns-node-cache | rancher/image-build-dns-nodecache | bci | TRUE | +| rke2-metrics-server | | | rancher/hardened-k8s-metrics-server | rancher/image-build-k8s-metrics-server | bci | TRUE | +| rke2-ingress-nginx | | | rancher/nginx-ingress-controller | rancher/ingress-nginx | bci | TRUE | +| rke2-ingress-nginx | | | rancher/mirrored-jettech-kube-webhook-certgen | rancher/image-mirror | | FALSE | +| rke2-canal | | | rancher/hardened-calico | rancher/image-build-calico | bci | TRUE | +| rke2-canal | | | rancher/hardened-cni-plugins | rancher/image-build-cni-plugins | bci | TRUE | +| rke2-canal | | | rancher/hardened-flannel | rancher/image-build-flannel | bci | TRUE | +| rke2-multus | | | rancher/hardened-multus-cni | rancher/image-build-multus | bci | TRUE | +| rke2-multus | | | rancher/hardened-cni-plugins | rancher/image-build-cni-plugins | bci | TRUE | +| rancher-sriov | | | rancher/hardened-sriov-cni | rancher/image-build-sriov-cni | bci | TRUE | +| rancher-sriov | | | rancher/hardened-ib-sriov-cni | rancher/image-build-ib-sriov-cni | bci | TRUE | +| rancher-sriov | | | rancher/hardened-sriov-network-config-daemon | rancher/image-build-sriov-operator | bci | TRUE | +| rancher-sriov | | | rancher/hardened-sriov-network-device-plugin | rancher/image-build-sriov-network-device-plugin | bci | TRUE | +| rancher-sriov | | | rancher/hardened-sriov-network-operator | rancher/image-build-sriov-operator | bci | TRUE | +| rancher-sriov | | | rancher/hardened-sriov-network-resources-injector | rancher/image-build-sriov-network-resources-injector | bci | TRUE | +| rancher-sriov | | | rancher/hardened-sriov-network-webhook | rancher/image-build-sriov-operator | bci | TRUE | +| rke2-calico | | | rancher/mirrored-calico-operator | rancher/image-mirror | | FALSE | +| rke2-calico | | | rancher/mirrored-calico-ctl | rancher/image-mirror | | FALSE | +| rke2-calico | | | rancher/mirrored-calico-kube-controllers | rancher/image-mirror | | FALSE | +| rke2-calico | | | rancher/mirrored-calico-typha | rancher/image-mirror | | FALSE | +| rke2-calico | | | rancher/mirrored-calico-node | rancher/image-mirror | | FALSE | +| rke2-calico | | | rancher/mirrored-calico-pod2daemon-flexvol | rancher/image-mirror | | FALSE | +| rke2-calico | | | rancher/mirrored-calico-cni | rancher/image-mirror | | FALSE | +| rke2-cilium | | | rancher/mirrored-cilium-cilium | rancher/image-mirror | | FALSE | +| rke2-cilium | | | rancher/mirrored-cilium-operator-aws | rancher/image-mirror | | FALSE | +| rke2-cilium | | | rancher/mirrored-cilium-operator-azure | rancher/image-mirror | | FALSE | +| rke2-cilium | | | rancher/mirrored-cilium-operator-generic | rancher/image-mirror | | FALSE | +| rke2-cilium | | | rancher/mirrored-cilium-startup-script | rancher/image-mirror | | FALSE | +| rancher-vsphere-cpi | | | rancher/mirrored-cloud-provider-vsphere-cpi-release-manager | rancher/image-mirror | | FALSE | +| rancher-vsphere-cpi | | | rancher/mirrored-cloud-provider-vsphere-csi-release-driver | rancher/image-mirror | | FALSE | +| rancher-vsphere-cpi | | | rancher/mirrored-cloud-provider-vsphere-csi-release-syncer | rancher/image-mirror | | FALSE | +| rancher-vsphere-csi | | | rancher/mirrored-k8scsi-csi-attacher | rancher/image-mirror | | FALSE | +| rancher-vsphere-csi | | | rancher/mirrored-k8scsi-csi-node-driver-registrar | rancher/image-mirror | | FALSE | +| rancher-vsphere-csi | | | rancher/mirrored-k8scsi-csi-provisioner | rancher/image-mirror | | FALSE | +| rancher-vsphere-csi | | | rancher/mirrored-k8scsi-csi-resizer | rancher/image-mirror | | FALSE | +| rancher-vsphere-csi | | | rancher/mirrored-k8scsi-livenessprobe | rancher/image-mirror | | FALSE | +| harvester-cloud-provider | | | docker.io/rancher/harvester-cloud-provider | Harvester team | | FALSE | +| harvester-csi-driver | | | docker.io/rancher/harvester-csi-driver | Harvester team | | FALSE | +| harvester-csi-driver | | | docker.io/rancher/longhornio-csi-attacher | Longhorn team | | FALSE | +| harvester-csi-driver | | | docker.io/rancher/longhornio-csi-node-driver-registrar | Longhorn team | | FALSE | +| harvester-csi-driver | | | docker.io/rancher/longhornio-csi-provisioner | Longhorn team | | FALSE | +| harvester-csi-driver | | | docker.io/rancher/longhornio-csi-resizer | Longhorn team | | FALSE | +| rke2-upgrade | | | rancher/rke2-upgrade | rancher/rke2-upgrade | alpine | FALSE | diff --git a/developer-docs/artifacts/images.md b/developer-docs/artifacts/images.md new file mode 100644 index 0000000000..2bbe437bc9 --- /dev/null +++ b/developer-docs/artifacts/images.md @@ -0,0 +1,33 @@ +# Images + +The goal is to list all of the images we use, and what they are based on. + +| Image | Based On | Built By | +| ----- | -------- | -------- | +[rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags) | [based](https://github.com/rancher/rke2/blob/master/Dockerfile#L157) on [scratch](https://hub.docker.com/_/scratch) | [rancher/rke2 repo](https://github.com/rancher/rke2) +[rancher/hardened-runc](https://hub.docker.com/r/rancher/hardened-runc/tags) | [based](https://github.com/rancher/image-build-runc/blob/master/Dockerfile#LL32C1-L32C9) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-runc](https://github.com/rancher/image-build-runc/blob/master/Makefile#L47) +[rancher/hardened-crictl](https://hub.docker.com/r/rancher/hardened-crictl/tags) | [based](https://github.com/rancher/image-build-crictl/blob/master/Dockerfile#L32) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-crictl](https://github.com/rancher/image-build-crictl/blob/master/Makefile) +[rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags) | [based](https://github.com/rancher/image-build-containerd/blob/master/Dockerfile#L59) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-containerd](https://github.com/rancher/image-build-containerd/blob/master/Makefile#L46) +[rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags) | [based](https://github.com/rancher/image-build-kubernetes/blob/master/Dockerfile#L77) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-kubernetes](https://github.com/rancher/image-build-kubernetes/blob/master/Makefile#L42) +[rancher/rke2-upgrade](https://hub.docker.com/r/rancher/rke2-upgrade/tags) | [based](https://github.com/rancher/rke2-upgrade/blob/master/Dockerfile#LL24C15-L24C15) on [alpine](https://hub.docker.com/_/alpine/tags) | [rancher/rke2-upgrade repo](https://github.com/rancher/rke2-upgrade/blob/master/.drone.yml#LL18C24-L18C24) +[rancher/hardened-build-base](https://hub.docker.com/r/rancher/hardened-build-base/tags) | [based](https://github.com/rancher/image-build-base/blob/master/Dockerfile.amd64#L11) on [golang alpine](https://hub.docker.com/_/golang/tags?page=1&name=1.20.3-alpine3.17) | [rancher/image-build-base repo](https://github.com/rancher/image-build-base) +[rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags) | [based](https://github.com/rancher/image-build-calico/blob/master/Dockerfile#L204) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-calico repo](https://github.com/rancher/image-build-calico) +[rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags) | [based](https://github.com/rancher/image-build-cni-plugins/blob/main/Dockerfile#L50) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-cni-plugins repo](https://github.com/rancher/image-build-cni-plugins/blob/main/Makefile#L32) +[rancher/hardened-coredns](https://hub.docker.com/r/rancher/hardened-coredns/tags) | [based](https://github.com/rancher/image-build-coredns/blob/master/Dockerfile#L53) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-coredns repo](https://github.com/rancher/image-build-coredns/blob/master/Makefile#L43) +[rancher/hardened-cluster-autoscaler](https://hub.docker.com/r/rancher/hardened-cluster-autoscaler/tags) | [based](https://github.com/rancher/image-build-coredns/blob/master/Dockerfile#L57) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-coredns](https://github.com/rancher/image-build-coredns/blob/master/Makefile#L71) +[rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags) | [based](https://github.com/rancher/image-build-dns-nodecache/blob/main/Dockerfile#L37) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-dns-nodecache repo](https://github.com/rancher/image-build-dns-nodecache/blob/main/Makefile#L49) +[rancher/hardened-etcd](https://hub.docker.com/r/rancher/hardened-etcd/tags) | [based](https://github.com/rancher/image-build-etcd/blob/master/Dockerfile#L43) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-etcd repo](https://github.com/rancher/image-build-etcd/blob/master/Makefile#L37) +[rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags) | [based](https://github.com/rancher/image-build-flannel/blob/master/Makefile#L37) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-flannel repo](https://github.com/rancher/image-build-flannel/blob/master/Makefile#L37) +[rancher/hardened-ib-sriov-cni](https://hub.docker.com/r/rancher/hardened-ib-sriov-cni/tags) | [based](https://github.com/rancher/image-build-ib-sriov-cni/blob/main/Dockerfile#L19) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-ib-sriov-cni repo](https://github.com/rancher/image-build-ib-sriov-cni/blob/main/Makefile#L32) +[rancher/hardened-k8s-metrics-server](https://hub.docker.com/r/rancher/hardened-k8s-metrics-server/tags) | [based](https://github.com/rancher/image-build-k8s-metrics-server/blob/master/Dockerfile#L43) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-k8s-metrics-server repo](https://github.com/rancher/image-build-k8s-metrics-server/blob/master/Makefile#L38) +[rancher/hardened-multus-cni](https://hub.docker.com/r/rancher/hardened-multus-cni/tags) | [based](https://github.com/rancher/image-build-multus/blob/main/Makefile#L43) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-multus repo](https://github.com/rancher/image-build-multus/blob/main/Makefile#L43) +[rancher/rke2-cloud-provider](https://hub.docker.com/r/rancher/rke2-cloud-provider/tags) | [based](https://github.com/rancher/image-build-rke2-cloud-provider/blob/main/Dockerfile#L27) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-rke2-cloud-provider repo](https://github.com/rancher/image-build-rke2-cloud-provider/blob/main/Makefile#L31) +[rancher/hardened-sriov-cni](https://hub.docker.com/r/rancher/hardened-sriov-cni/tags) | [based](https://github.com/rancher/image-build-sriov-cni/blob/main/Dockerfile#L19) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-sriov-cni repo](https://github.com/rancher/image-build-sriov-cni/blob/main/Makefile#L26) +[rancher/hardened-sriov-network-device-plugin](https://hub.docker.com/r/rancher/hardened-sriov-network-device-plugin/tags) | [based](https://github.com/rancher/image-build-sriov-network-device-plugin/blob/main/Dockerfile#L19) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-sriov-network-device-plugin repo](https://github.com/rancher/image-build-sriov-network-device-plugin/blob/main/Makefile#L33) +[rancher/hardened-sriov-network-resources-injector](https://hub.docker.com/r/rancher/hardened-sriov-network-resources-injector/tags) | [based](https://github.com/rancher/image-build-sriov-network-resources-injector/blob/main/Dockerfile#L17) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-sriov-network-resources-injector repo](https://github.com/rancher/image-build-sriov-network-resources-injector/blob/main/Makefile#L32) +[rancher/hardened-sriov-network-operator](https://hub.docker.com/r/rancher/hardened-sriov-network-operator/tags) | [based](https://github.com/rancher/image-build-sriov-operator/blob/main/Dockerfile.amd64#L48) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-sriov-operator repo](https://github.com/rancher/image-build-sriov-operator/blob/main/Makefile#L35) +[rancher/hardened-sriov-network-config-daemon](https://hub.docker.com/r/rancher/hardened-sriov-network-config-daemon/tags) | [based](https://github.com/rancher/image-build-sriov-operator/blob/main/Dockerfile.amd64#L29) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-sriov-operator repo](https://github.com/rancher/image-build-sriov-operator/blob/main/Makefile#L64) +[rancher/hardened-sriov-network-webhook](https://hub.docker.com/r/rancher/hardened-sriov-network-webhook/tags) | [based](https://github.com/rancher/image-build-sriov-operator/blob/main/Dockerfile.amd64#L40) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-sriov-operator repo](https://github.com/rancher/image-build-sriov-operator/blob/main/Makefile#L93) +[rancher/hardened-whereabouts](https://hub.docker.com/r/rancher/hardened-whereabouts/tags) | [based](https://github.com/rancher/image-build-whereabouts/blob/main/Dockerfile#L27) on [bci](https://build.opensuse.org/project/show/devel:BCI:SLE-15-SP4) | [rancher/image-build-whereabouts repo](https://github.com/rancher/image-build-whereabouts/blob/main/Makefile#L36) +[rancher/hardened-node-feature-discovery](https://hub.docker.com/r/rancher/hardened-node-feature-discovery/tags) | [based](https://github.com/rancher/image-build-node-feature-discovery/blob/main/Makefile#L30) on [bci-minimal](https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP5/minimal-image) | [rancher/image-build-node-feature-discovery repo](https://github.com/rancher/image-build-node-feature-discovery/blob/main/Makefile#L30) +[rancher/system-agent-installer-rke2](https://hub.docker.com/r/rancher/system-agent-installer-rke2) | [based](https://github.com/rancher/system-agent-installer-rke2/blob/main/package/Dockerfile#L1) on [scratch](https://hub.docker.com/_/scratch) | [rancher/system-agent-installer-rke2 repo](https://github.com/rancher/system-agent-installer-rke2/blob/main/.drone.yml#L48) diff --git a/developer-docs/artifacts/repo.md b/developer-docs/artifacts/repo.md new file mode 100644 index 0000000000..3e67a2cc12 --- /dev/null +++ b/developer-docs/artifacts/repo.md @@ -0,0 +1,35 @@ +# Sources + +The goal is to list all of the repos we use and what artifacts they provide. + +| Repo | Image | Other | +| ---- | ----- | ----- | +https://github.com/rancher/rke2 | [rancher/rke2-runtime](https://hub.docker.com/r/rancher/rke2-runtime/tags) | Rke2 binary, installer, and Helm charts +https://github.com/rancher/image-build-base | [rancher/hardened-build-base](https://hub.docker.com/r/rancher/hardened-build-base/tags) +https://github.com/rancher/image-build-calico | [rancher/hardened-calico](https://hub.docker.com/r/rancher/hardened-calico/tags) +https://github.com/rancher/image-build-cni-plugins | [rancher/hardened-cni-plugins](https://hub.docker.com/r/rancher/hardened-cni-plugins/tags) +https://github.com/rancher/image-build-containerd | [rancher/hardened-containerd](https://hub.docker.com/r/rancher/hardened-containerd/tags) +https://github.com/rancher/image-build-coredns | [rancher/hardened-coredns](https://hub.docker.com/r/rancher/hardened-coredns/tags) +https://github.com/rancher/image-build-crictl | [rancher/hardened-crictl](https://hub.docker.com/r/rancher/hardened-crictl/tags) +https://github.com/rancher/image-build-dns-nodecache | [rancher/hardened-dns-node-cache](https://hub.docker.com/r/rancher/hardened-dns-node-cache/tags) +https://github.com/rancher/image-build-etcd | [rancher/hardened-etcd](https://hub.docker.com/r/rancher/hardened-etcd/tags) +https://github.com/rancher/image-build-flannel | [rancher/hardened-flannel](https://hub.docker.com/r/rancher/hardened-flannel/tags) +https://github.com/rancher/image-build-ib-sriov-cni | [rancher/hardened-ib-sriov-cni](https://hub.docker.com/r/rancher/hardened-ib-sriov-cni/tags) +https://github.com/rancher/image-build-k8s-metrics-server | [rancher/hardened-k8s-metrics-server](https://hub.docker.com/r/rancher/hardened-k8s-metrics-server/tags) +https://github.com/rancher/image-build-kubernetes | [rancher/hardened-kubernetes](https://hub.docker.com/r/rancher/hardened-kubernetes/tags) +https://github.com/rancher/image-build-multus | [rancher/hardened-multus-cni](https://hub.docker.com/r/rancher/hardened-multus-cni/tags) +https://github.com/rancher/image-build-rke2-cloud-provider | [rancher/rke2-cloud-provider](https://hub.docker.com/r/rancher/rke2-cloud-provider/tags) +https://github.com/rancher/image-build-runc | [rancher/hardened-runc](https://hub.docker.com/r/rancher/hardened-runc/tags) +https://github.com/rancher/image-build-sriov-cni | [rancher/hardened-sriov-cni](https://hub.docker.com/r/rancher/hardened-sriov-cni/tags) +https://github.com/rancher/image-build-sriov-network-device-plugin | [rancher/hardened-sriov-network-device-plugin](https://hub.docker.com/r/rancher/hardened-sriov-network-device-plugin/tags) +https://github.com/rancher/image-build-sriov-network-resources-injector | [rancher/hardened-sriov-network-resources-injector](https://hub.docker.com/r/rancher/hardened-sriov-network-resources-injector/tags) +https://github.com/rancher/image-build-sriov-operator | [rancher/hardened-sriov-network-operator](https://hub.docker.com/r/rancher/hardened-sriov-network-operator/tags) +https://github.com/rancher/image-build-whereabouts | [rancher/hardened-whereabouts](https://hub.docker.com/r/rancher/hardened-whereabouts/tags) +https://github.com/rancher/image-build-node-feature-discovery | [rancher/hardened-node-feature-discovery](https://hub.docker.com/r/rancher/hardened-node-feature-discovery/tags) +https://github.com/rancher/system-agent-installer-rke2 | [rancher/system-agent-installer-rke2](https://hub.docker.com/r/rancher/system-agent-installer-rke2) +https://github.com/rancher/rke2-upgrade | [rancher/rke2-upgrade](https://hub.docker.com/r/rancher/rke2-upgrade/tags) +https://github.com/rancher/rke2-packaging | none | publishes RPMs +https://github.com/rancher/rke2-selinux | none | publishes RPMs +https://github.com/rancher/rke2-charts | none | none, used by rke2 to generate charts +https://github.com/rancher/vsphere-charts | none | none, used by rke2 to generate charts for vsphere +https://github.com/rancher/charts-build-scripts | none | publishes a [helper tool](https://github.com/rancher/charts-build-scripts/releases) for updating charts from upstream diff --git a/developer-docs/image_sources.md b/developer-docs/image_sources.md deleted file mode 100644 index c2125729ad..0000000000 --- a/developer-docs/image_sources.md +++ /dev/null @@ -1,72 +0,0 @@ -This document lists all of the images used by RKE2 and any of its packaged components (Helm charts), along with info on where they are built and what other images they copy content from. If you find an image not on this list, please open a PR. - -The **Chart** column indicates the Helm chart that uses this image. `CORE` indicates that this is not used by a Helm chart, but by the supervisor itself to host a control-plane component. `CORE FROM` indicates that one of the `CORE` images has a `COPY --from` line in the Dockerfile that loads content from this image. - -| Chart | Image | Build Repo | Source Images | Hardened | -| ----- | ----- | ---------- | ------------- | -------- | -| CORE | rancher/hardened-kubernetes | rancher/image-build-kubernetes | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| CORE | rancher/rke2-runtime | rancher/rke2 | ‣ rancher/k3s
‣ rancher/hardened-kubernetes
‣ rancher/hardened-containerd
‣ rancher/hardened-crictl
‣ rancher/hardened-runc | TRUE | -| CORE FROM | rancher/hardened-containerd | rancher/image-build-containerd | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| CORE FROM | rancher/hardened-crictl | rancher/image-build-crictl | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| CORE FROM | rancher/hardened-runc | rancher/image-build-runc | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| CORE | rancher/rke2-cloud-provider | rancher/image-build-rke2-cloud-provider | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| CORE | rancher/hardened-etcd | rancher/image-build-etcd | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| CORE | docker.io/rancher/klipper-helm | k3s-io/klipper-helm | ‣ alpine | FALSE | -| | | | | | -| rke2-coredns | rancher/hardened-cluster-autoscaler | rancher/image-build-coredns | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rke2-coredns | rancher/hardened-coredns | rancher/image-build-coredns | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rke2-coredns | rancher/hardened-dns-node-cache | rancher/image-build-dns-nodecache | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base
‣ rancher/hardened-kube-proxy | TRUE | -| | | | | | -| rke2-metrics-server | rancher/hardened-k8s-metrics-server | rancher/image-build-k8s-metrics-server | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| | | | | | -| rke2-ingress-nginx | rancher/nginx-ingress-controller | rancher/ingress-nginx | ‣ ubi8/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rke2-ingress-nginx | rancher/mirrored-jettech-kube-webhook-certgen | rancher/image-mirror | | FALSE | -| | | | | | -| rke2-canal | rancher/hardened-calico | rancher/image-build-calico | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base
‣ rancher/hardened-cni-plugins
‣ calico/bpftool
‣ calico/bird
centos | TRUE | -| rke2-canal FROM | rancher/hardened-cni-plugins | rancher/image-build-cni-plugins | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rke2-canal | rancher/hardened-flannel | rancher/image-build-flannel | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| | | | | | -| rke2-multus | rancher/hardened-multus-cni | rancher/image-build-multus | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rke2-multus | rancher/hardened-cni-plugins | rancher/image-build-cni-plugins | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| | | | | | -| rancher-sriov | rancher/hardened-sriov-cni | rancher/image-build-sriov-cni | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rancher-sriov | rancher/hardened-ib-sriov-cni | rancher/image-build-ib-sriov-cni | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rancher-sriov | rancher/hardened-sriov-network-config-daemon | rancher/image-build-sriov-operator | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base
goboring/golang | TRUE | -| rancher-sriov | rancher/hardened-sriov-network-device-plugin | rancher/image-build-sriov-network-device-plugin | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rancher-sriov | rancher/hardened-sriov-network-operator | rancher/image-build-sriov-operator | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rancher-sriov | rancher/hardened-sriov-network-resources-injector | rancher/image-build-sriov-network-resources-injector | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| rancher-sriov | rancher/hardened-sriov-network-webhook | rancher/image-build-sriov-operator | ‣ ubi7/ubi-minimal
‣ rancher/hardened-build-base | TRUE | -| | | | | | -| rke2-calico | rancher/mirrored-calico-operator | rancher/image-mirror | | FALSE | -| rke2-calico | rancher/mirrored-calico-ctl | rancher/image-mirror | | FALSE | -| rke2-calico | rancher/mirrored-calico-kube-controllers | rancher/image-mirror | | FALSE | -| rke2-calico | rancher/mirrored-calico-typha | rancher/image-mirror | | FALSE | -| rke2-calico | rancher/mirrored-calico-node | rancher/image-mirror | | FALSE | -| rke2-calico | rancher/mirrored-calico-pod2daemon-flexvol | rancher/image-mirror | | FALSE | -| rke2-calico | rancher/mirrored-calico-cni | rancher/image-mirror | | FALSE | -| | | | | | -| rke2-cilium | rancher/mirrored-cilium-cilium | rancher/image-mirror | | FALSE | -| rke2-cilium | rancher/mirrored-cilium-operator-aws | rancher/image-mirror | | FALSE | -| rke2-cilium | rancher/mirrored-cilium-operator-azure | rancher/image-mirror | | FALSE | -| rke2-cilium | rancher/mirrored-cilium-operator-generic | rancher/image-mirror | | FALSE | -| rke2-cilium | rancher/mirrored-cilium-startup-script | rancher/image-mirror | | FALSE | -| | | | | | -| rancher-vsphere-cpi | rancher/mirrored-cloud-provider-vsphere-cpi-release-manager | rancher/image-mirror | | FALSE | -| rancher-vsphere-cpi | rancher/mirrored-cloud-provider-vsphere-csi-release-driver | rancher/image-mirror | | FALSE | -| rancher-vsphere-cpi | rancher/mirrored-cloud-provider-vsphere-csi-release-syncer | rancher/image-mirror | | FALSE | -| | | | | | -| rancher-vsphere-csi | rancher/mirrored-k8scsi-csi-attacher | rancher/image-mirror | | FALSE | -| rancher-vsphere-csi | rancher/mirrored-k8scsi-csi-node-driver-registrar | rancher/image-mirror | | FALSE | -| rancher-vsphere-csi | rancher/mirrored-k8scsi-csi-provisioner | rancher/image-mirror | | FALSE | -| rancher-vsphere-csi | rancher/mirrored-k8scsi-csi-resizer | rancher/image-mirror | | FALSE | -| rancher-vsphere-csi | rancher/mirrored-k8scsi-livenessprobe | rancher/image-mirror | | FALSE | -| | | | | | -| harvester-cloud-provider | docker.io/rancher/harvester-cloud-provider | Harvester team | | FALSE | -| | | | | | -| harvester-csi-driver | docker.io/rancher/harvester-csi-driver | Harvester team | | FALSE | -| harvester-csi-driver | docker.io/rancher/longhornio-csi-attacher | Longhorn team | | FALSE | -| harvester-csi-driver | docker.io/rancher/longhornio-csi-node-driver-registrar | Longhorn team | | FALSE | -| harvester-csi-driver | docker.io/rancher/longhornio-csi-provisioner | Longhorn team | | FALSE | -| harvester-csi-driver | docker.io/rancher/longhornio-csi-resizer | Longhorn team | | FALSE | -| | | | | | -| rke2-upgrade | rancher/rke2-upgrade | rancher/rke2-upgrade | alpine | FALSE |