Files
temporal/docker/docker-bake.hcl
Rodrigo Zhou 17ab93a4fd Update dependencies (#10007)
## What changed?
- Update Go 1.26.0 to 1.26.2
- Run `make update-dependencies` (skipped
`github.com/olekukonko/tablewriter`)
- Updated Docker Alpine version to 3.23.4

## Why?
Address CVEs

## How did you test it?
- [ ] built
- [ ] run locally and tested manually
- [ ] covered by existing tests
- [ ] added new unit test(s)
- [ ] added new functional test(s)

## Potential risks
2026-04-21 17:32:21 -07:00

95 lines
2.7 KiB
HCL

variable "SERVER_VERSION" {
default = "unknown"
}
variable "CLI_VERSION" {
default = "unknown"
}
variable "IMAGE_REPO" {
default = "temporaliotest"
}
variable "IMAGE_SHA_SHORT_TAG" {
default = ""
}
variable "IMAGE_SHA_FULL_TAG" {
default = ""
}
variable "IMAGE_BRANCH_TAG" {
default = ""
}
variable "SAFE_IMAGE_BRANCH_TAG" {
default = join("-", [for c in regexall("[a-z0-9]+", lower(IMAGE_BRANCH_TAG)) : c])
}
variable "TEMPORAL_SHA" {
default = ""
}
variable "TAG_LATEST" {
default = false
}
# ALPINE_TAG is the single source of truth for the Alpine base image version.
# NOTE: We use just the tag without a digest pin because digest-pinned manifest lists
# cause platform resolution issues in multi-arch buildx builds (InvalidBaseImagePlatform warnings).
variable "ALPINE_TAG" {
default = "3.23.4"
}
target "admin-tools" {
context = "docker"
dockerfile = "targets/admin-tools.Dockerfile"
args = {
ALPINE_TAG = "${ALPINE_TAG}"
}
tags = compact([
"${IMAGE_REPO}/admin-tools:${IMAGE_SHA_SHORT_TAG}",
"${IMAGE_REPO}/admin-tools:${IMAGE_SHA_FULL_TAG}",
"${IMAGE_REPO}/admin-tools:${SAFE_IMAGE_BRANCH_TAG}",
TAG_LATEST ? "${IMAGE_REPO}/admin-tools:latest" : "",
])
platforms = ["linux/amd64", "linux/arm64"]
labels = {
"org.opencontainers.image.title" = "admin-tools"
"org.opencontainers.image.description" = "Temporal admin tools"
"org.opencontainers.image.url" = "https://github.com/temporalio/temporal"
"org.opencontainers.image.source" = "https://github.com/temporalio/temporal"
"org.opencontainers.image.licenses" = "MIT"
"org.opencontainers.image.revision" = "${TEMPORAL_SHA}"
"org.opencontainers.image.created" = timestamp()
"com.temporal.server.version" = "${SERVER_VERSION}"
"com.temporal.cli.version" = "${CLI_VERSION}"
}
}
target "server" {
context = "docker"
dockerfile = "targets/server.Dockerfile"
args = {
ALPINE_TAG = "${ALPINE_TAG}"
}
tags = compact([
"${IMAGE_REPO}/server:${IMAGE_SHA_SHORT_TAG}",
"${IMAGE_REPO}/server:${IMAGE_SHA_FULL_TAG}",
"${IMAGE_REPO}/server:${SAFE_IMAGE_BRANCH_TAG}",
TAG_LATEST ? "${IMAGE_REPO}/server:latest" : "",
])
platforms = ["linux/amd64", "linux/arm64"]
labels = {
"org.opencontainers.image.title" = "server"
"org.opencontainers.image.description" = "Temporal Server"
"org.opencontainers.image.url" = "https://github.com/temporalio/temporal"
"org.opencontainers.image.source" = "https://github.com/temporalio/temporal"
"org.opencontainers.image.licenses" = "MIT"
"org.opencontainers.image.version" = "${SERVER_VERSION}"
"org.opencontainers.image.revision" = "${TEMPORAL_SHA}"
"org.opencontainers.image.created" = timestamp()
"com.temporal.server.version" = "${SERVER_VERSION}"
}
}