Add k3s images

[brandond]

I believe these images were previously pushed manually by @cjellick

Signed-off-by: Brad Davidson brad.davidson@rancher.com

[cbron]

lgtm. Not sure if we typically prepend k8s.gcr to the repo like we do with others, but I suppose since these are pre-existing we won't do that.

[brandond]

OK. I actually need to merge the multiarch PR #27 first, as the current script will overwrite the manually-pushed multiarch ones when I merge this one. I know that one's potentially a much bigger deal.

[deniseschannon]

why does coredns/coredns go to rancher/coredns-coredns but metrics server doesn't go to rancher/metrics-server-metrics-server?

[brandond]

I have many questions about the lack of conventions in the image mirror.

• library/nginx goes to rancher/nginx but should have been rancher/library-nginx.
• busybox is really library/busybox (no registry, no repo = docker.io/library/) but goes to just rancher/busybox.
• us.gcr.io/k8s-artifacts-prod/external-dns/external-dns is rancher/kubernetes-external-dns - not even the same name!
• coredns/coredns went to rancher/coredns-coredns. We also have rancher/coredns which is our fips-140 build of coredns/coredns. I only know that because I asked.
• k3s uses rancher/metrics-server (has been for a while), even though it should have been rancher/metrics-server-metrics-server (as you point out). Our v0.3.6 tag is also a multiarch manifest list, while upstream v0.3.6 (only available on the old location of gcr.io/google_containers/metrics-server) is amd64 only, although there are v0.3.6-arm64 and v0.3.6-arm tags available with the appropriate architectures. I've sidestepped this by going to v0.3.7 which is multiarch upstream at the current location. This one is real bad.

I opened an issue to suggest that we move our mirrored stuff out to a dedicated org, and @cjellick was going to work on moving our hardened images to another org at some point as well. Right now everything's all mushed in together and it's challenging to pick apart because we've already got references to the current mishmash embedded in a bunch of supported releases.

[deniseschannon]

This already exists in DockerHub and is multi-arch:
https://hub.docker.com/repository/docker/rancher/pause/tags?page=1

[brandond]

Yes, but it was pushed manually by @ibuildthecloud a year ago. Should be automated.

[deniseschannon]

This version already exists in Dockerhub and is multi-arch:

https://hub.docker.com/repository/docker/rancher/coredns-coredns/tags?page=1

[brandond]

Yes, but it was pushed manually by @cjellick. Should be automated.

[deniseschannon]

In a side note, I added the automated publisher perms to all of these repos for whenever we want to have drone build/push these images.

[brandond]

I just moved this back to draft to prevent merging until the mirror script is updated to support multiarch.

[superseb]

What's the status of this PR?

[brandond]

Will review soon. I've been focused on RKE2 GA tasks.