feat: zarf file

.github/workflows/test.yaml

@@ -27,3 +27,6 @@ jobs:
 
       - name: Test building the docker image
         run: uds run dev-build
+
+      - name: Test building a zarf package
+        run: uds run build-zarf-pkg

.gitignore

@@ -13,3 +13,4 @@ test.cer
 test.csr
 test.pem
 *authorized_certs*
+src/extra-jars/

src/Dockerfile

@@ -21,7 +21,7 @@ COPY extra-jars/* ./target/
 # Build the Java truststore from DOD CAs                                          #
 #                                                                                 #
 ###################################################################################
-FROM cgr.dev/chainguard/jdk:latest-dev as truststore
+FROM amazoncorretto:21-alpine-jdk as truststore
 USER root
 RUN apk add openssl coreutils sed bash findutils
 

tasks.yaml

@@ -13,6 +13,12 @@ tasks:
     description: "Build and publish the multi-arch image"
     actions:
       - cmd: docker buildx build --push --platform linux/arm64/v8,linux/amd64 --tag ${IMAGE_NAME}:${VERSION} src
+
+  - name: build-zarf-pkg
+    description: "Build the custom docker image and the zarf package for transporting it"
+    actions:
+      - cmd: docker build --tag ${IMAGE_NAME}:${VERSION} src
+      - cmd: ./uds zarf package create . --set IDENTITY_CONFIG_IMG=${IMAGE_NAME}:${VERSION} --confirm
 
   - name: dev-build
     description: "Build the image locally for dev"

zarf.yaml

@@ -0,0 +1,16 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/defenseunicorns/zarf/main/zarf.schema.json
+kind: ZarfPackageConfig
+metadata:
+  name: keycloak-identity-config
+  version: "0.0.1"
+
+constants:
+  - name: IDENTIFY_CONFIG_IMG
+    description: "Image name and tag (MUST BE PROVIDED -- no default)"
+    value: '###ZARF_PKG_TMPL_IDENTITY_CONFIG_IMG###'
+
+components:
+  - name: keycloak-config-wrapper
+    required: true
+    images:
+      - '###ZARF_PKG_TMPL_IDENTITY_CONFIG_IMG###'