bakery/client-config.yaml.example at master · rayshoo/bakery · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
global:
  # ecs or k8s
  platform: ecs

  # amd64 or arm64
  arch: amd64

  # Environment variables for the container launched on ecs or k8s
  env:
    foo: bar

  # Script to run before executing kaniko when the kaniko container is launched on ecs
  pre-script: |
    echo 'this is original pre script' > pre.txt

  # Script to run after a successful kaniko build. Skipped on build failure.
  post-script: |
    echo 'this is post script' > post.txt

  # Credentials listed here are saved to /kaniko/.docker/config.json before kaniko runs.
  kaniko-credentials:
  - registry: registry.example.com
    username: user
    password: password
  - registry: cache.example.com
    username: cache
    password: password

  kaniko:
    # Relative to /workspace (default cmd.dir). Defaults to '.'
    context-path: .
    # Server default, but can be explicitly overridden
    dockerfile: Dockerfile
    build-args:
      BUILD_BASE_IMAGE_NAME: golang
      BUILD_BASE_IMAGE_TAG: 1.25.4-alpine3.22
      BASE_IMAGE_NAME: alpine
      BASE_IMAGE_TAG: latest
    cache:
      enable: true
      repo: cache.example.com
      ttl: 24h
      copy-layers: true
      run-layers: true
      compressed: false
    snapshot-mode: redo
    use-new-run: true
    cleanup: true
    custom-platform: linux/amd64
    ignore-path: []
    destination: registry.example.com/repo/foo:bar
    no-push: false
    extra-flags: ''

bake:
- arch: amd64

  # Merged with global env; duplicate keys are overridden by bake values
  env:
    foo1: bar1

  kaniko:
    # container-name is optional, defaults to kaniko
    # container-name: kaniko

    # Overrides global.kaniko.context-path
    # context-path: /workspace/src

    # Overrides global.kaniko.dockerfile
    # dockerfile: Dockerfile

    # All other global.kaniko options can be overridden here as well

    # Merged with global.kaniko.build-args; duplicate keys are overridden by bake values
    build-args:
      BUILD_PLATFORM: amd64

- arch: arm64
  # Overrides global.pre-script
  pre-script: |
    echo 'this is overrided pre script' > pre.txt

  # Overrides global.post-script
  post-script: ''

  # Overrides global.kaniko-credentials entirely (all-or-nothing)
  kaniko-credentials:
  - registry: registry.example.com
    username: user
    password: password
  - registry: cache.example.com
    username: cache
    password: password

  kaniko:
    image:
      # Overrides global.kaniko.image.secret. An empty array disables docker credential storage.
      secret:
      - registry: registry.example.com
        username: user
        password: password

    # container-name is optional, defaults to kaniko
    container-name: kaniko-arm64

    # Overrides global.kaniko.context-path
    context-path: /workspace/src

    # Overrides global.kaniko.dockerfile
    dockerfile: Dockerfile.arm64

    # All other global.kaniko options can be overridden here as well

    # Merged with global.env; duplicate keys are overridden by bake values
    env:
      foo2: bar2

    # Merged with global.kaniko.build-args; duplicate keys are overridden by bake values
    build-args:
      BUILD_PLATFORM: arm64