Dockerfile

# Copyright 2018 Datawire. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License

################################################################
# This Dockerfile copies in the required packages from the CACHED_CONTAINER_IMAGE and configures
# Ambassador. The reason packages are not installed and copied instead is that this pattern speeds up
# the inner development loop, since packages do not need to be installed in every docker build.
# Besides that, alpine mirrors have been found to be inconsistent over timezones, so this seems to
# be a better approach.

########
# Seeing weird errors copying stuff? Check .dockerignore!!
########

# By default, Ambassador's config and other application-specific stuff gets written to /ambassador. You can
# configure a different location for the runtime configuration elements via environment variables.

ARG CACHED_CONTAINER_IMAGE
ARG AMBASSADOR_BASE_IMAGE

################################################################
# STAGE ONE: use the CACHED_CONTAINER_IMAGE's toolchains to
# build and install the Ambassador app itself.

FROM $CACHED_CONTAINER_IMAGE as cached

# Install the application itself
COPY multi/ multi
COPY ambassador/ ambassador
RUN releng/install-py.sh prd install */requirements.txt
RUN rm -rf ./multi ./ambassador

################################################################
# STAGE TWO: switch to the AMBASSADOR_BASE_IMAGE as the base of
# our actual runtime image, and copy the built artifacts from
# stage one to here.

FROM $AMBASSADOR_BASE_IMAGE

ENV AMBASSADOR_ROOT=/ambassador
WORKDIR ${AMBASSADOR_ROOT}

# One could argue that this is perhaps a bit of a hack. However, it's also the way to
# get all the stuff that pip installed without needing the whole of the Python dev
# chain.
COPY --from=cached /usr/lib/python3.6 /usr/lib/python3.6/
COPY --from=cached /usr/lib/libyaml* /usr/lib/
COPY --from=cached /usr/lib/pkgconfig /usr/lib/

# Copy Ambassador binaries (built in stage one).
COPY --from=cached /usr/bin/ambassador /usr/bin/diagd /usr/bin/

# MKDIR an empty /ambassador/ambassador-config, so that you can drop a configmap over it
# if you really really need to (not recommended).
RUN mkdir ambassador-config envoy

# COPY in the stuff for use with --demo.
COPY demo/config/ ambassador-demo-config
COPY demo/services/ demo-services

# ...and symlink /usr/bin/python because of !*@&#*!@&# Werkzeug.
RUN ln -s python3 /usr/bin/python

# Fix permissions to allow running as a non root user
RUN chgrp -R 0 ${AMBASSADOR_ROOT} && \
    chmod -R u+x ${AMBASSADOR_ROOT} && \
    chmod -R g=u ${AMBASSADOR_ROOT} /etc/passwd

# COPY the entrypoint and Python-kubewatch and make them runnable.
COPY ambassador/entrypoint.sh .
COPY ambassador/grab-snapshots.py .
COPY ambassador/kick_ads.sh .
COPY ambassador/kubewatch.py .
COPY ambassador/post_update.py .
COPY ambassador/post_watt.sh .
COPY ambassador/watch_hook.py .
RUN chmod 755 entrypoint.sh grab-snapshots.py kick_ads.sh kubewatch.py post_update.py post_watt.sh watch_hook.py

# XXX Move to base image
COPY watt .
RUN chmod 755 watt

ENTRYPOINT [ "./entrypoint.sh" ]