CI Tools Image

This is a fairly basic container that installs a few specific tools needed to run Kubernetes related CI steps.

The tools are managed using mise and specified in ./mise.toml. The container is built on every push.

Tools included:

• kubectl for communicating with the Kubernetes cluster via the CLI.
• go-jsonnet Google's semi-official Go implementation
• helm for fetching and deploying charts.
• jb for managing jsonnet dependencies.
• tanka for compiling the jsonnet into Kubernetes manifests.
• sops for safely storing secrets in git repos.
• kustomize for editing and creating Kustomization manifests.
• kubeconform for validating Kubernetes manifests.
• flux for managing FluxCD related steps

Also installed using the package manager is git, ssh, and jq.

Building the container yourself

If you want to build it on your computer, do something like the following:

git clone "https://code.nogweii.net/ops/k8s/ci-tools-image.git"
cd ./ci-tools-image/
podman build -t ci-tools-image:latest .

Usage

For a Gitlab CI job:

tanka ci job example:
  image: c.code.nogweii.net/ops/k8s/ci-tools-image:latest
  stage: deploy
  script:
    - jb install
    - tk export export-stuff --recursive environments/ --merge-strategy=replace-envs
  cache:
    key:
      files:
        - jsonnetfile.lock.json
    paths:
      - vendor/