cloud-pipeline
cloud-pipeline copied to clipboard
[Draft] Docker Artifactory integration
Background At the moment platform uses self-hosted docker registry for storing docker images of the tools. To extend integration with GCP we need to support Google Artifact Registry as storage for docker images.
Approach There are several integration points with docker registry:
- Server API provides set of methods to get information for a docker image (mainly
DockerClientclass) - Docker registry push events monitoring for automated tool registration (https://cloud.google.com/artifact-registry/docs/configure-notifications)
- Vulnerability scanning of images using Clair and Docker component scanner services
- Run launch with image from registry
- Docker client authentication for users and DinD runs
Other options A clear and concise description of any alternative solutions or features you've considered.