ofen

FROM python:3-alpine

WORKDIR /app

COPY . .

RUN adduser appuser --disabled-password \
    --gecos "" --home /nonexistent \
    --shell /sbin/nologin --no-create-home \
    --uid 1000 \

ofen

---
build:
  variables:
    GOPRIVATE: git.example.com/*
  image:
    name: gcr.io/kaniko-project/executor:debug
    entrypoint: [""]
  stage: build
  script:
  - mkdir -p /kaniko/.docker

ofen

Create self-signed certificate

openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
-keyout server.key -out server.crt -subj "/CN=example.com" \
-addext "subjectAltName=DNS:example.com,DNS:www.example.net,IP:10.0.0.1"

View certificate and key

Certificate