57 lines
1.7 KiB
Docker
57 lines
1.7 KiB
Docker
# Copyright 2015 The Kubernetes Authors. All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
FROM BASEIMAGE
|
|
|
|
CROSS_BUILD_COPY qemu-QEMUARCH-static /usr/bin/
|
|
|
|
WORKDIR /etc/nginx
|
|
|
|
RUN clean-install \
|
|
diffutils \
|
|
libcap2-bin \
|
|
dumb-init
|
|
|
|
COPY . /
|
|
|
|
RUN setcap cap_net_bind_service=+ep /nginx-ingress-controller
|
|
|
|
# Create symlinks to redirect nginx logs to stdout and stderr docker log collector
|
|
# This only works if nginx is started with CMD or ENTRYPOINT
|
|
# Required because clean-install removes /var/log content
|
|
# We cannot chown /etc/nginx recursively because that adds 100MB to the image
|
|
RUN mkdir -p /var/log/nginx \
|
|
&& ln -sf /dev/stdout /var/log/nginx/access.log \
|
|
&& ln -sf /dev/stderr /var/log/nginx/error.log \
|
|
&& bash -eux -c ' \
|
|
writeDirs=( \
|
|
/etc/nginx/template \
|
|
/etc/ingress-controller/ssl \
|
|
/etc/ingress-controller/auth \
|
|
/var/log \
|
|
/var/log/nginx \
|
|
); \
|
|
for dir in "${writeDirs[@]}"; do \
|
|
mkdir -p ${dir}; \
|
|
chown -R www-data.www-data ${dir}; \
|
|
done \
|
|
' \
|
|
&& chown www-data.www-data /etc/nginx/nginx.conf \
|
|
&& chown www-data.www-data /etc/nginx/opentracing.json
|
|
|
|
USER www-data
|
|
|
|
ENTRYPOINT ["/usr/bin/dumb-init"]
|
|
|
|
CMD ["/nginx-ingress-controller"]
|