Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/cyclenerd/cloud-tools-container
📦 Ready-to-use Docker container image with cloud tools (AWS CLI, Google Cloud CLI, Terraform, Packer, Ansible)
https://github.com/cyclenerd/cloud-tools-container
ansible aws awscli circleci container-image docker docker-image gcloud gcloud-cli gcloud-sdk gcp google-cloud google-cloud-platform helm k8s kubectl kubernetes open-policy-agent packer terraform
Last synced: 3 months ago
JSON representation
📦 Ready-to-use Docker container image with cloud tools (AWS CLI, Google Cloud CLI, Terraform, Packer, Ansible)
- Host: GitHub
- URL: https://github.com/cyclenerd/cloud-tools-container
- Owner: Cyclenerd
- License: apache-2.0
- Created: 2022-08-22T10:38:41.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2024-04-15T06:38:40.000Z (10 months ago)
- Last Synced: 2024-05-01T20:02:41.112Z (9 months ago)
- Topics: ansible, aws, awscli, circleci, container-image, docker, docker-image, gcloud, gcloud-cli, gcloud-sdk, gcp, google-cloud, google-cloud-platform, helm, k8s, kubectl, kubernetes, open-policy-agent, packer, terraform
- Language: Dockerfile
- Homepage: https://hub.docker.com/r/cyclenerd/cloud-tools-container
- Size: 112 KB
- Stars: 7
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# Cloud Tools Container
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](#readme)
[](https://github.com/Cyclenerd/cloud-tools-container/actions/workflows/docker-latest.yml)
[](https://github.com/Cyclenerd/cloud-tools-container/blob/master/LICENSE)
[](https://github.com/Cyclenerd/cloud-tools-container/actions/workflows/docker-latest.yml)
[](https://hub.docker.com/r/cyclenerd/cloud-tools-container)
Ready-to-use Docker container image for
AWS CodeBuild/CodePipeline,
Bitbucket Pipelines,
CircleCI,
GitHub Actions,
GitLab runner jobs and
Google Cloud Build.
**Image:**
```text
cyclenerd/cloud-tools-container:latest
```
**Multiarch support:**
* `amd64` : Intel or AMD 64-Bit CPU (x86-64)
* `arm64` : Arm-based 64-Bit CPU (i.e. Apple silicon, AWS Graviton, Ampere Altra)
> This project uses [GitHub Actions](https://github.com/Cyclenerd/cloud-tools-container/actions) for automated builds and deployments.
> The image is regularly rebuilt on the 15th of each month.
## Software
This [Docker container image](https://hub.docker.com/r/cyclenerd/cloud-tools-container) is based on the **Ubuntu 24.04** release (`ubuntu:noble`).
The following software is included and tested:
* [Ansible](https://docs.ansible.com/ansible/latest/getting_started/index.html) (`ansible` and `ansible-playbook`)
* [AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-welcome.html) (`aws`)
* [fuego](https://github.com/sgarciac/fuego#readme) command line firestore client (`fuego`)
* [GCR Cleaner](https://github.com/GoogleCloudPlatform/gcr-cleaner#readme) deletes old container images on registries (`gcr-cleaner-cli`)
* [Google Cloud CLI](https://cloud.google.com/cli) (`gcloud`, `gsutil` and `bq`)
* [Open Policy Agent](https://www.openpolicyagent.org/) general-purpose policy engine, context-aware policy enforcement (`opa`)
* [Packer](https://developer.hashicorp.com/packer) (`packer`)
* [ShellCheck](https://www.shellcheck.net/) analysis and linting tool for Shell/Bash scripts (`shellcheck`)
* [skopeo](https://github.com/containers/skopeo) command line utility that performs various operations on container images and repositories (`skopeo`)
* [Terraform](https://developer.hashicorp.com/terraform/cli) (`terraform`)
* [terraform-docs](https://github.com/terraform-docs/terraform-docs#readme) generates documentation from Terraform modules (`terraform-docs`)
* [Terragrunt](https://terragrunt.gruntwork.io/) thin wrapper that provides extra tools (`terragrunt`)
* [tflint](https://github.com/terraform-linters/tflint) linting tool for Terraform code (`tflint`)
* [tfsec](https://github.com/aquasecurity/tfsec#readme) analysis security scanner for Terraform code (`tfsec`)
* Kubernetes
* [Helm](https://helm.sh/) (`helm`)
* [Kubernetes cluster manager](https://kubernetes.io/docs/reference/kubectl/) (`kubectl`)
* [Vault](https://developer.hashicorp.com/vault) (`vault`)
* Base packages
* GNU bash 5 (`bash`)
* [apt-utils](https://packages.ubuntu.com/lunar/apt-utils)
* [Advanced Packaging Tool](https://ubuntu.com/server/docs/package-management) package manager (`apt`, `apt-get`)
* [build-essential](https://packages.ubuntu.com/lunar/build-essential)
* GNU C compiler `gcc`
* [make](https://www.gnu.org/software/make/) utility for directing compilation (`make`)
* [Common CA certificates](https://ubuntu.com/server/docs/security-trust-store)
* [curl](https://curl.se/docs/manpage.html) tool for transferring data with URL syntax (`curl`)
* [DiG](https://en.wikipedia.org/wiki/Dig_(command)) DNS lookup utility (`dig`)
* [FIGlet](http://www.figlet.org/) prints its input using large characters (`figlet`)
* [git](https://git-scm.com/) distributed revision control system (`git`)
* [jq](https://jqlang.github.io/jq/) JSON processor (`jq`)
* [Mutt](https://wiki.archlinux.org/title/Mutt) command line email client (`mutt`)
* [OpenSSL](https://www.openssl.org/) cryptography toolkit (`openssl`)
* [OpenSSH](https://www.openssh.com/) remote login client (`ssh`)
* Perl 5 (`perl`)
* [cpanm](https://metacpan.org/dist/App-cpanminus/view/bin/cpanm) modules installer for Perl (`cpanm`)
* Python 3 (`python3`)
* [pip](https://pypi.org/project/pip/) package installer for Python (`pip3`)
* Go programming language (`go`)
* GNU tar archiving utility (`tar`)
* De-archiver for .zip files (`unzip`)
* Archiver for .zip files (`zip`)
## Run
Runs a command in the container, pulling the image if needed and starting the container.
### Docker 🐳
Docker run command:
```shell
docker run cyclenerd/cloud-tools-container:latest aws --version
```
### Podman 🦭
Podman run command:
```shell
podman run docker.io/cyclenerd/cloud-tools-container:latest aws --version
```
## Examples
Example configurations for various CI/CD tools.
### AWS CodeBuild
AWS CodeBuild configuration:
```json
{
"environment": {
"type": "LINUX_CONTAINER",
"image": "cyclenerd/cloud-tools-container:latest",
"computeType": "BUILD_GENERAL1_SMALL"
},
}
```
### Google Cloud Build
Google Cloud Build (`cloudbuild.yaml`) configuration file:
```yml
steps:
- name: 'cyclenerd/cloud-tools-container:latest'
entrypoint: 'gcloud'
args: ['--version']
```
### GitLab CI/CD
#### Google Cloud Service Account Key
GitLab CI/CD (`.gitlab-ci.yml`) configuration with Google Cloud Service Account Key:
```yml
variables:
GOOGLE_APPLICATION_CREDENTIALS: "/tmp/service_account_key.json"
default:
image: cyclenerd/cloud-tools-container:latest
before_script:
# Login
- echo "$YOUR_GOOGLE_CLOUD_SERVICE_ACCOUNT_KEY" > "$GOOGLE_APPLICATION_CREDENTIALS"
- gcloud auth activate-service-account --key-file="$GOOGLE_APPLICATION_CREDENTIALS"
stages:
- auth
gcloud-auth-list:
stage: auth
script:
- gcloud auth list
```
#### Google Cloud Workload Identity Federation
GitLab CI/CD (`.gitlab-ci.yml`) configuration with Google Cloud [Workload Identity Federation](https://github.com/Cyclenerd/google-workload-identity-federation) login:
```yml
variables:
WIF_PROVIDER: projects/1057256049272/locations/global/workloadIdentityPools/gitlab-com/providers/gitlab-com-oidc
SERVICE_ACCOUNT: [email protected]
GOOGLE_CREDENTIALS: gcp_temp_cred.json
default:
image: cyclenerd/cloud-tools-container:latest
before_script:
# Login
- echo "${CI_JOB_JWT_V2}" > gitlab_jwt_token.txt
- gcloud iam workload-identity-pools create-cred-config "${WIF_PROVIDER}"
--service-account="${SERVICE_ACCOUNT}"
--output-file=${GOOGLE_CREDENTIALS}
--credential-source-file=gitlab_jwt_token.txt
- gcloud config set auth/credential_file_override "${GOOGLE_CREDENTIALS}"
stages:
- auth
gcloud-auth-list:
stage: auth
script:
- gcloud auth list
```
### Bitbucket Pipelines
#### Google Cloud Workload Identity Federation
Bitbucket pipeline configuration (`bitbucket-pipelines.yml`) with Google Cloud [Workload Identity Federation](https://github.com/Cyclenerd/google-workload-identity-federation) login:
```yml
image: cyclenerd/cloud-tools-container:latest
pipelines:
default:
- step:
name: "Workload Identity Federation"
# Enable OIDC
oidc: true
max-time: 5
script:
# Set variables
- export WIF_PROVIDER='projects/753695557698/locations/global/workloadIdentityPools/bitbucket-org/providers/bitbucket-org-oidc'
- export SERVICE_ACCOUNT='[email protected]'
- export GOOGLE_CREDENTIALS='gcp_temp_cred.json'
# Configure Workload Identity Federation via a credentials file.
- echo ${BITBUCKET_STEP_OIDC_TOKEN} > .ci_job_jwt_file
- gcloud iam workload-identity-pools create-cred-config "${WIF_PROVIDER}"
--service-account="${SERVICE_ACCOUNT}"
--output-file="${GOOGLE_CREDENTIALS}"
--credential-source-file=.ci_job_jwt_file
- gcloud config set auth/credential_file_override "${GOOGLE_CREDENTIALS}"
# Now you can run gcloud commands authenticated as the impersonated service account.
```
### GitHub Actions
GitHub Actions configuration:
```yaml
jobs:
cloud-tools-container:
runs-on: 'ubuntu-latest'
# Use container to run the steps in a job
container:
image: 'docker://cyclenerd/cloud-tools-container:latest'
steps:
- name: "Terraform"
run: terraform --version
```
### CircleCI
CircleCI configuration:
```yml
jobs:
cloud-tools-container:
docker:
- image: cyclenerd/cloud-tools-container:latest
steps:
- run:
name: Google Cloud CLI
command: gcloud --version
```
## Contributing
Have a patch that will benefit this project?
Awesome! Follow these steps to have it accepted.
1. Please read [how to contribute](CONTRIBUTING.md).
1. Fork this Git repository and make your changes.
1. Create a Pull Request.
1. Incorporate review feedback to your changes.
1. Accepted!
## License
All files in this repository are under the [Apache License, Version 2.0](LICENSE) unless noted otherwise.