search

cloudfoundry-incubator / cflocal

Stage and launch CF apps, push and pull droplets, and connect to real CF services -- in Docker
Apache License 2.0
178 stars 27 forks source link

push a staged app to ... XYZ ? #9

Closed pourquoi42 closed 6 years ago

pourquoi42 commented 6 years ago

One of the features is "Stage apps with Docker and push them to a remote Cloud Foundry."

This made me wonder: when I have a docker container, couldn't I also push it elsewhere? Let's say kubernetes or dockerswarm?

sclevine commented 6 years ago

Yep, you can use cf local export to do this.

That said, k8s and Docker Swarm don't support upgrading the OS-level dependencies of live-running apps automatically, so you would need to re-run cf local stage, re-run cf local export, and push your new image to k8s/DS every time a USN comes out to achieve the same level of security. (This is one reason why CF is awesome.)

pourquoi42 commented 6 years ago

awesome, thanks.

In my understanding, the approach of K8s to deal with security fixes on OS-level dependencies is simply to do a rolling upgrade of the apps deployed. True, that means the image would have to be rebaked from scratch first.