Gitlab Kubernetes Runner & Kaniko
Just a short post here: In my previous post I set up this nice and shiny blog using hugo, you can find it here. In that post I set up a quick gitlab runner config to build and deploy my docker images to my Kubernetes cluster. There was a problem with that however, I was using a Docker-in-Docker (dind) image with TLS enabled. Which is not an ideal workflow, as not only does it require extra config on the runners themselves, and a dedicated docker host, It also requires the build container to run in a privileged execution mode - which creates a large amount of unnecessary security holes, by basically disabling all security mechanisms of containers, which can lead to a rather terrifying vulnerability known as host privilege escalation....