While preparing the presentation for tomorrow's summit session on
Docker Image, I realized that there is yet another reason why this is
super important to have those images rebuildable from sources +
official images. We work with a few rather "corporate" customers  -
and their security teams are rather picky when it comes to accepting
software. That includes not allowing PyPI packages and images outside
of whitelisted and vetted ones.

For such customers, having an unproven-origin image is a total no-go,
so using the Helm chart with binary dependency on which origin is not
verified and proven is a no-go. By providing an easy way to rebuild
the image from sources + official (hopefully vetted) images, we make
it possible to use the helm chart as everything can be rebuilt and
vetted in-house.

I think that alone is enough reason to get those sources in and
officially support it.

J.

Reply via email to