Base image build process - #7270
Conversation
|
|
e2c8ca6 to
611f535
Compare
|
dc70509 to
b8f1ceb
Compare
d3cc9d8 to
1902e53
Compare
1902e53 to
578a92d
Compare
f90836f to
5d90e00
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 5ac604fe36
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Content-Addressed Base Images via GitLab CI
Summary
Automate weblog base image publishing with content-addressed tags, replacing the manual label-driven workflow (
build-*-base-imagesPR labels + manual version bumps + human push coordination).What Changed
build_base_imagesGitLab CI job runs on every push: derives dependencies fromCOPYinstructions in each*.base.Dockerfile, computes a 12-char content hash, and pushesdatadog/system-tests:<name>.base-<hash>if the tag doesn't exist. Idempotent — never overwrites.utils/build/docker/base-images.lock.json) maps stable aliases (system_tests_base_nodejs_express4) → immutable tags. Consumer Dockerfiles useFROM <alias>, resolved via BuildKit--build-contextat build time.wait_for_base_image.py) for the locked tag instead.build-*-base-imageslabels,_build_weblog_base_imagesworkflow input, manual-vNtag management.New Workflow
python utils/scripts/build_base_images.py --update-lock+python utils/scripts/update_mirror_images.pyWorkflow
🚀 Once your PR is reviewed and the CI green, you can merge it!
🛟 #apm-shared-testing 🛟
Reviewer checklist
tests/ormanifests/is modified ? I have the approval from R&P teambuild-XXX-imagelabel is present