Adding distroless image to Envoy CI pipeline (#16268)

* ci: Adding distroless image Signed-off-by: Oleksiy Pylypenko <[email protected]>
envoyproxy · May 3, 2021 · c86cfb5 · c86cfb5
1 parent a058c6e
commit c86cfb5
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/ci/Dockerfile-envoy-distroless b/ci/Dockerfile-envoy-distroless
@@ -0,0 +1,10 @@
+FROM gcr.io/distroless/base-debian10:nonroot
+
+ADD configs/envoyproxy_io_proxy.yaml /etc/envoy/envoy.yaml
+
+ARG ENVOY_BINARY_SUFFIX=_stripped
+ADD linux/amd64/build_release${ENVOY_BINARY_SUFFIX}/* /usr/local/bin/
+
+EXPOSE 10000
+
+CMD ["envoy", "-c", "/etc/envoy/envoy.yaml"]
diff --git a/ci/docker_ci.sh b/ci/docker_ci.sh
@@ -125,7 +125,7 @@ if is_windows; then
   BUILD_COMMAND=("build")
 else
   # "-google-vrp" must come afer "" to ensure we rebuild the local base image dependency.
-  BUILD_TYPES=("" "-debug" "-alpine" "-google-vrp")
+  BUILD_TYPES=("" "-debug" "-alpine" "-distroless" "-google-vrp")
 
   # Configure docker-buildx tools
   BUILD_COMMAND=("buildx" "build")