authentik/proxy.Dockerfile

# Stage 1: Build website
FROM docker.io/node:16 as web-builder

COPY ./web /static/

ENV NODE_ENV=production
RUN cd /static && npm i && npm run build

# Stage 2: Build
FROM docker.io/golang:1.17.3-bullseye AS builder

WORKDIR /go/src/goauthentik.io

COPY . .
COPY --from=web-builder /static/robots.txt /work/web/robots.txt
COPY --from=web-builder /static/security.txt /work/web/security.txt
COPY --from=web-builder /static/dist/ /work/web/dist/
COPY --from=web-builder /static/authentik/ /work/web/authentik/

ENV CGO_ENABLED=0
RUN go build -o /go/proxy ./cmd/proxy

# Stage 3: Run
FROM gcr.io/distroless/static-debian11:debug

ARG GIT_BUILD_HASH
ENV GIT_BUILD_HASH=$GIT_BUILD_HASH

COPY --from=builder /go/proxy /

HEALTHCHECK CMD [ "wget", "--spider", "http://localhost:9300/akprox/ping" ]

EXPOSE 9000 9300 9443

ENTRYPOINT ["/proxy"]
root: use go api client from github (#1378) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-10 16:18:11 +00:00			`# Stage 1: Build website`
root: pin node images to v16 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-10-28 08:29:48 +00:00			`FROM docker.io/node:16 as web-builder`
outpost/proxy: use common template for proxy error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-07 14:44:15 +00:00
			`COPY ./web /static/`

			`ENV NODE_ENV=production`
			`RUN cd /static && npm i && npm run build`

root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`# Stage 2: Build`
build(deps): bump golang from 1.17.2-bullseye to 1.17.3-bullseye (#1737) 2021-11-05 07:29:51 +00:00			`FROM docker.io/golang:1.17.3-bullseye AS builder`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: initial merging of outpost and main project Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-06-16 10:02:02 +00:00			`WORKDIR /go/src/goauthentik.io`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: initial merging of outpost and main project Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-06-16 10:02:02 +00:00			`COPY . .`
outpost/proxy: use common template for proxy error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-07 14:44:15 +00:00			`COPY --from=web-builder /static/robots.txt /work/web/robots.txt`
			`COPY --from=web-builder /static/security.txt /work/web/security.txt`
			`COPY --from=web-builder /static/dist/ /work/web/dist/`
			`COPY --from=web-builder /static/authentik/ /work/web/authentik/`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: build outposts without CGO, use debug images for basic shell Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-02 09:11:51 +00:00			`ENV CGO_ENABLED=0`
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`RUN go build -o /go/proxy ./cmd/proxy`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`# Stage 3: Run`
root: build outposts without CGO, use debug images for basic shell Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-02 09:11:51 +00:00			`FROM gcr.io/distroless/static-debian11:debug`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
outposts: fix git hash not being set in outposts Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-07-21 19:31:25 +00:00			`ARG GIT_BUILD_HASH`
			`ENV GIT_BUILD_HASH=$GIT_BUILD_HASH`

root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`COPY --from=builder /go/proxy /`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
core: metrics v2 (#1370) * outposts: add ldap metrics, move ping to 9100 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: add flow_executor metrics Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * use port 9300 for metrics, add core metrics port Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outposts/controllers/k8s: add service monitor creation support Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-09 13:52:24 +00:00			`HEALTHCHECK CMD [ "wget", "--spider", "http://localhost:9300/akprox/ping" ]`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
outposts: don't map port 9300 on docker, only expose port Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-21 19:40:08 +00:00			`EXPOSE 9000 9300 9443`

Proxy v2 (#189) 2020-09-02 22:04:12 +00:00			`ENTRYPOINT ["/proxy"]`