The inspiration came from this forum post: https://forum.gitlab.cn/t/topic/1893 — I discovered you can browse all the images on registry.gitlab.cn. Beyond JiHu GitLab’s official images, you can also see security products and all kinds of middleware.
Getting the full image list
The search endpoint https://registry.gitlab.cn/api/search returns all public images. If you also want version tags, use the tags endpoint: https://registry.gitlab.cn/api/repositories/sre/vault/tags
Technology choices
Are you building software platforms for clients or your own company? How do you choose and combine middleware? This is a chance to see what open source middleware JiHu’s experts picked. Over 600 images came back — too many — so here’s my trimmed selection:
- Skipping anything k8s, ruby, gitlab related
- codeclimate
- elasticsearch
- redis
- hugo
- filebeat
- scrutiny
- thanos
- vault
- gitleaks
This covers code quality scanning, security scanning, secret detection (keys/passwords) and more. When you build your own platform, this list is a good reference.
k8s stuff, Elasticsearch and Redis need no introduction — let’s talk about the less common ones.
codeclimate — code quality scanning
CodeClimate scans code quality. It supports many common languages and can run standardized checks without executing the code — surfacing security vulnerabilities and all kinds of code errors.
hugo — static site generation
Hugo is a static site generator written in Go: fast, easy to use, configurable. It takes content and template directories and renders a complete HTML website. A classic mid-sized site renders in a fraction of a second — about 1 ms per page.
scrutiny — smart disk monitoring
Scrutiny is a disk monitoring middleware that reads SMART data and helps you manage large fleets of disk drives with ease.
vault — secrets management
Vault is a tool for controlling access to secrets — API keys, passwords, certificates and so on. It provides a unified interface to all your sensitive data, with strict access control and detailed audit logging.
gitleaks — secret detection in git repositories
Gitleaks is a SAST tool for detecting hardcoded secrets in git repos — passwords, API keys and tokens. It catches committed credentials and other sensitive information.
Wrap-up
JiHu GitLab’s middleware stack is a great reference. Many features JiHu offers online can be self-hosted with these open source components — security scanning, secret scanning, code quality and so on. Use them as a basis to build your own infrastructure. Keep learning from the masters.