mirror of
https://github.com/puppetmaster/typhoon.git
synced 2025-08-12 23:14:58 +02:00
Change Kubelet container image publishing
* Build Kubelet container images internally and publish to Quay and Dockerhub (new) as an alternative in case of registry outage or breach * Use our infra to provide single and multi-arch (default) Kublet images for possible future use * Docs: Show how to use alternative Kubelet images via snippets and a systemd dropin (builds on #737) Changes: * Update docs with changes to Kubelet image building * If you prefer to trust images built by Quay/Dockerhub, automated image builds are still available with unique tags (albeit with some limitations): * Quay automated builds are tagged `build-{short_sha}` (limit: only amd64) * Dockerhub automated builts are tagged `build-{tag}` and `build-master` (limit: only amd64, no shas) Links: * Kubelet: https://github.com/poseidon/kubelet * Docs: https://typhoon.psdn.io/topics/security/#container-images * Registries: * quay.io/poseidon/kubelet * docker.io/psdn/kubelet
This commit is contained in:
@ -4,6 +4,14 @@ Notable changes between versions.
|
||||
|
||||
## Latest
|
||||
|
||||
* Update Kubelet image build infra and publishing ([#749](https://github.com/poseidon/typhoon/pull/749))
|
||||
* Publish Kubelet images from internal infra to Quay and Dockerhub
|
||||
* [quay.io/poseidon/kubelet](https://quay.io/repository/poseidon/kubelet) (official)
|
||||
* [docker.io/psdn/kubelet](https://hub.docker.com/r/psdn/kubelet) (fallback)
|
||||
* Document use of alternate Kubelet images during registry incidents
|
||||
* For those preferring to trust images built by Quay/Dockerhub,
|
||||
automated image builds are still available with an alternate tag
|
||||
strategy (see [docs](https://typhoon.psdn.io/topics/security/#container-images))
|
||||
* Update Calico from v3.14.0 to [v3.14.1](https://docs.projectcalico.org/v3.14/release-notes/)
|
||||
|
||||
### Addons
|
||||
|
Reference in New Issue
Block a user