Add argocd-image-updater

Signed-off-by: kouki <[email protected]>

.github/workflows/main.yaml

@@ -70,10 +70,16 @@ jobs:
           - dir: "./vault"
             container-image: "vault"
             scan: "true"
+<<<<<<< HEAD
           - dir: "./bpf-map-pressure-exporter"
             container-image: "bpf-map-pressure-exporter"
             scan: "true"
             make_test: true
+=======
+          - dir: "./argocd-image-updater"
+            container-image: "argocd-image-updater"
+            scan: "true"
+>>>>>>> 782e87a0 (Add argocd-image-updater)
 
     runs-on: ubuntu-22.04
     env:

argocd-image-updater/.dockerignore

@@ -0,0 +1 @@
+*

argocd-image-updater/Dockerfile

@@ -0,0 +1,33 @@
+FROM quay.io/cybozu/golang:1.21-jammy AS builder
+
+ENV ARGOCD_IMAGE_UPDATER_VERSION=0.12.2
+
+WORKDIR /work
+
+RUN git clone --depth 1 --branch v${ARGOCD_IMAGE_UPDATER_VERSION} https://github.com/argoproj-labs/argocd-image-updater.git
+
+WORKDIR /work/argocd-image-updater
+RUN mkdir -p dist && \
+    make controller
+
+FROM quay.io/cybozu/ubuntu:22.04
+LABEL org.opencontainers.image.source="https://github.com/cybozu/neco-containers"
+
+RUN groupadd -g 10000 argocd && \
+    useradd -r -u 10000 -g argocd argocd && \
+    mkdir -p /home/argocd && \
+    chown argocd:argocd /home/argocd && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends git openssh-client python3 python3-pip && \
+    pip3 install --upgrade pip && \
+    pip3 install awscli && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+COPY --from=builder /work/argocd-image-updater/dist/argocd-image-updater /usr/local/bin
+COPY --from=builder /work/argocd-image-updater/hack/git-ask-pass.sh /usr/local/bin/git-ask-pass.sh
+COPY --from=builder /work/argocd-image-updater/LICENSE /usr/local/argocd-image-updater/LICENSE
+
+USER argocd
+
+ENTRYPOINT ["/usr/local/bin/argocd-image-updater"]

argocd-image-updater/README.md

@@ -0,0 +1,8 @@
+# Argo CD Image Updater Container
+
+This derectory provides a Dockerfile to build a arogocd-image-updater container
+that runs [argoproj-labs/argocd-image-updater](https://github.com/argoproj-labs/argocd-image-updater).
+
+## Docker images
+
+Docker images are available on [ghcr.io/cybozu/argocd-image-updater](https://ghcr.io/cybozu/argocd-image-updater)

argocd-image-updater/TAG

@@ -0,0 +1 @@
+0.12.2.1

maintenance.md

@@ -101,6 +101,17 @@ In Regular update, do the following as part of the update of each CRD-providing
 
 ***NOTE:*** ArgoCD's Application objects are validated by [neco-admission](#admission-neco-admission).  If Application CRD has been changed, you may need to update [neco-admission](#admission-neco-admission).
 
+## argocd-image-updater
+
+![Regular Update](./regular_update.svg)
+
+1. Check [releases](https://github.com/argoproj-labs/argocd-image-updater/releases) for changes.
+2. Check the upstream Dockerfile. If there are any updates, update our `Dockerfile`.
+    - https://github.com/argoproj-labs/argocd-image-updater/blob/vX.Y.Z/Dockerfile
+3. Update version variables in `Dockerfile`.
+    - Update `ARGOCD_IMAGE_UPDATER_VERSION`.
+4. Update `TAG` file.
+
 ## bird
 
 ![Regular Update](./regular_update.svg)