Packer.Images/ansible/roles/assets/tasks/containerimages.yml

- name: Parse manifests for container images
  ansible.builtin.shell:
    # This set of commands is necessary to deal with multi-line scalar values
    # eg.:
    #      key: |
    #        multi-line
    #        value
    cmd: >-
      cat {{ item.dest }} | yq --no-doc eval '.. | .image? | select(.)' | awk '!/ /';
      cat {{ item.dest }} | yq eval '.data.data' | yq --no-doc eval '.. | .image? | select(.)';
      cat {{ item.dest }} | yq --no-doc eval '.. | .files? | with_entries(select(.value.path == "*.yaml")).[0].content' | awk '!/null/' | yq eval '.. | .image? | select(.)'
  register: parsedmanifests
  loop: "{{ clusterapi_manifests.results }}"
  loop_control:
    label: "{{ item.dest | basename }}"

- name: Parse metacluster helm charts for container images
  ansible.builtin.shell:
    cmd: "{{ item.value.helm.parse_logic }}"
    chdir: /opt/metacluster/helm-charts/{{ item.key }}
  register: chartimages_metacluster
  when: item.value.helm is defined
  loop: "{{ query('ansible.builtin.dict', components) }}"
  loop_control:
    label: "{{ item.key }}"

- name: Parse workloadcluster helm charts for container images
  ansible.builtin.shell:
    cmd: "{{ item.value.parse_logic }}"
    chdir: /opt/workloadcluster/helm-charts/{{ item.value.namespace }}/{{ item.key }}
  register: chartimages_workloadcluster
  loop: "{{ query('ansible.builtin.dict', downstream.helm_charts) }}"
  loop_control:
    label: "{{ item.key }}"

- name: Store container images in dicts
  ansible.builtin.set_fact:
    containerimages_{{ item.source }}: "{{ item.results }}"
  loop:
    - source: charts
      results: "{{ (chartimages_metacluster | json_query('results[*].stdout_lines')) + (chartimages_workloadcluster | json_query('results[*].stdout_lines')) | select() | flatten | list }}"
    - source: kubeadm
      results: "{{ kubeadmimages.stdout_lines }}"
    - source: manifests
      results: "{{ parsedmanifests | json_query('results[*].stdout_lines') | select() | flatten | list }}"
  loop_control:
    label: "{{ item.source }}"

- name: Log in to container registry
  ansible.builtin.shell:
    cmd: >-
      skopeo login \
        docker.io \
        --username={{ docker_username }} \
        --password={{ docker_password }}
  no_log: true

- name: Pull and store containerimages
  ansible.builtin.shell:
    cmd: >-
      skopeo copy \
        --insecure-policy \
        --retry-times=5 \
        docker://{{ item }} \
        oci-archive:./{{ ( item | regex_findall('[^/:]+'))[-2] }}_{{ lookup('ansible.builtin.password', '/dev/null length=5 chars=ascii_lowercase,digits seed={{ item }}') }}.tar:{{ item }}
    chdir: /opt/metacluster/container-images
  loop: "{{ (containerimages_charts + containerimages_kubeadm + containerimages_manifests + dependencies.container_images) | flatten | unique | sort }}"