39 lines
1.9 KiB
Docker
39 lines
1.9 KiB
Docker
#
|
|
# This is the NGINX router for OpenShift Origin.
|
|
#
|
|
# The standard name for this image is openshift/origin-nginx-router
|
|
#
|
|
FROM registry.fedoraproject.org/f29/origin-cli:latest
|
|
|
|
ENV NAME=origin-nginx-router \
|
|
VERSION=3.11 \
|
|
ARCH=x86_64
|
|
|
|
RUN dnf install -y nginx && \
|
|
dnf clean all && \
|
|
mkdir -p /var/lib/nginx/router/{certs,cacerts} && \
|
|
mkdir -p /var/lib/nginx/{conf,run,log,cache} && \
|
|
touch /var/lib/nginx/conf/nginx.conf && \
|
|
setcap 'cap_net_bind_service=ep' /usr/sbin/nginx && \
|
|
chown -R :0 /var/lib/nginx && \
|
|
chmod -R g+w /var/lib/nginx && \
|
|
ln -sf /var/lib/nginx/log/error.log /var/log/nginx/error.log
|
|
|
|
COPY . /var/lib/nginx/
|
|
|
|
LABEL io.k8s.display-name="OpenShift Origin NGINX Router" \
|
|
io.k8s.description="This is a component of OpenShift Origin and contains an NGINX instance that automatically exposes services within the cluster through routes, and offers TLS termination, reencryption, or SNI-passthrough on ports 80 and 443." \
|
|
summary="This is a component of OpenShift Origin and contains an NGINX instance that automatically exposes services within the cluster through routes, and offers TLS termination, reencryption, or SNI-passthrough on ports 80 and 443." \
|
|
maintainer="Jakub Cajka <jcajka@fedoraproject.org>" \
|
|
License="GPLv2+" \
|
|
name="$FGC/$NAME" \
|
|
com.redhat.component="$NAME" \
|
|
version="$VERSION" \
|
|
architecture="$ARCH" \
|
|
usage="This is a component of OpenShift Origin and contains an NGINX instance that automatically exposes services within the cluster through routes, and offers TLS termination, reencryption, or SNI-passthrough on ports 80 and 443."
|
|
USER 1001
|
|
EXPOSE 80 443
|
|
WORKDIR /var/lib/nginx/conf
|
|
ENV TEMPLATE_FILE=/var/lib/nginx/conf/nginx-config.template \
|
|
RELOAD_SCRIPT=/var/lib/nginx/reload-nginx
|
|
ENTRYPOINT ["/usr/bin/openshift-router", "--working-dir=/var/lib/nginx/router"]
|