Dockerfile

FROM ubuntu:22.04
ARG DEBIAN_FRONTEND=noninteractive
ENV TZ=America/New_York \
    DEBIAN_FRONTEND=noninteractive

LABEL "author"="Reuben Cleetus"
LABEL "version"="1.0.0b0"
LABEL "email"="reuben@cleet.us"

ENV BB_TEMPLATE_VERSION="1.12.0"
ENV BB_VERSION="1.36.0"

ENV SOPS_VER="3.7.2"
ENV KUSTOMIZE_VER="4.5.2"
ENV KUBECTL_VER="v1.23.1"

# This is required as of version BB 1.9.0/1.30.1 to get gatekeeper to reconcile
# https://jhooq.com/failed-to-get-the-data-key/
ENV GPG_TTY="/dev/pts/0"


# apt-get
RUN curl -sL https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor | tee /etc/apt/trusted.gpg.d/microsoft.gpg > /dev/null

RUN apt-get update && apt-get install -y \
    python3.10 \
    zip \
    jq \
    gpg \
    libssl-dev \
    libffi-dev \
    apt-transport-https \
    lsb-release \
    software-properties-common \
    wget \
    ca-certificates \
    gnupg \
    git \
    curl \
    python3-pip \
    nano \
    vim \
    gettext-base \
    && rm -rf /var/lib/apt/lists/*


# Azure CLI
RUN curl -sL https://aka.ms/InstallAzureCLIDeb | sed 's/install -y azure-cli/install -y azure-cli=2.36.0-1~jammy/' |bash

# Terraform
RUN wget https://releases.hashicorp.com/terraform/1.1.7/terraform_1.1.7_linux_arm64.zip
RUN unzip terraform*.zip
RUN mv terraform /usr/local/bin

# Kubectl
RUN curl -LO https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VER}/bin/linux/amd64/kubectl
RUN chmod +x ./kubectl
RUN mv ./kubectl /usr/local/bin

# Kustomize
RUN curl -sL "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv${KUSTOMIZE_VER}/kustomize_v${KUSTOMIZE_VER}_linux_amd64.tar.gz" | \
  tar -xz -C "/usr/bin" kustomize \
  && chmod +x /usr/bin/kustomize
## RUN curl -L https://github.com/kubernetes-sigs/kustomize/releases/download/v${KUSTOMIZE_VER}/kustomize_${KUSTOMIZE_VER}_linux_amd64  -o /usr/bin/kustomize \
#    && chmod +x /usr/bin/kustomize

# Flux
RUN curl -s https://fluxcd.io/install.sh | bash

# SOPS
ADD https://github.com/mozilla/sops/releases/download/v${SOPS_VER}/sops-v${SOPS_VER}.linux /usr/local/bin/sops
RUN chmod +x /usr/local/bin/sops

# AZCopy
RUN set -ex \
    && curl -L -o azcopy.tar.gz https://aka.ms/downloadazcopy-v10-linux \
    && tar -xf azcopy.tar.gz --strip-components=1 \
    && mv ./azcopy /usr/local/bin

# Fixing KeyVault bug in AZ CLI (issue/13507)
RUN pip3 uninstall azure-keyvault; \
    pip3 install azure-keyvault==1.1.0

# PyBuilder
COPY . /PyBuilder
WORKDIR /PyBuilder
RUN ls -l
RUN pip install pipreqs \
    && pipreqs . \
    && pip install -r requirements.txt

# Prepare RKE2 working
RUN git clone https://github.com/p1-dsop/dsop-rke2 working/dsop_rke2

RUN chmod +x working/dsop_rke2/scripts/check-terraform.sh
RUN chmod +x working/dsop_rke2/scripts/fetch-kubeconfig.sh
RUN chmod +x working/dsop_rke2/scripts/fetch-ssh-key.sh
RUN chmod +x working/dsop_rke2/scripts/check-terraform.sh
RUN chmod +x working/dsop_rke2/example/run_after_deploy.sh

# Prepare AKS working
# TODO: Need to update this to point to p1-dsop after forking
RUN git clone https://github.com/timothymeyers/dsop-aks working/dsop_aks
#RUN git clone git@github.com:p1-dsop/dsop-environment.git working/bigbang

# Prepare Big Bang working - customer template
RUN git clone -b ${BB_TEMPLATE_VERSION} --single-branch https://repo1.dso.mil/platform-one/big-bang/customers/template.git working/bigbang
RUN cp working/bigbang/dev/bigbang.yaml working/bigbang/dev/bigbang.yaml.template
RUN cp working/bigbang/.sops.yaml working/bigbang/.sops.yaml.template
RUN mkdir -p working/bigbang/scripts working/bigbang/base working/bigbang/dev
RUN mv -f bigbang-helpers/base/* working/bigbang/base/
RUN mv -f bigbang-helpers/dev/* working/bigbang/dev/
RUN mv -f bigbang-helpers/scripts/* working/bigbang/scripts/
RUN chmod +x working/bigbang/scripts/*.sh
RUN rm -rf bigbang-helpers

# Prepare Big Bang working - Big Bang proper, for flux install
RUN git clone -b ${BB_VERSION} --single-branch https://repo1.dso.mil/platform-one/big-bang/bigbang.git working/bigbang/scripts/bigbang-for-flux
RUN chmod +x working/bigbang/scripts/bigbang-for-flux/scripts/*.sh