...

This section will be same as mentioned for the JVM Docker Image in KIP-975 build and test pipeline.

Build and Test

Prior to release, the Docker images must undergo building, testing, and vulnerability scanning. To streamline this process, we'll be setting up a GitHub Actions workflow. This workflow will generate two reports: one for test results and another for scanning results. These reports will be available for community review before voting.

...

We intend to setup a nightly cron job using GitHub Actions and leverage an open-source vulnerability scanning tool like trivy (https://github.com/aquasecurity/trivy), to get vulnerability reports on all supported images. This tool offers a straightforward way to integrate vulnerability checks directly into our GitHub Actions workflow. 

Release Process

Following

...

is the

...

plan to

...

release the Docker image:

...

1. RM would have generated and pushed Apache Kafka's Release Candidate artifacts to apache sftp server hosted in Image Modifiedhome.apache.org by release.py script
2. Run the

...

1. automation to build the docker image(using the above Release Candidate tarball URL) and test the image

...

Execute the script to build the docker image(using the already publicly released AK tarball URL) and test the image locally.

...

Once the Docker image artifact is ready, it will get reviewed by the community and voting will be conducted, just for the Docker image release.

...

1. .

2. The docker image needs to be pushed to some Dockerhub repo(eg. Release Manager's) for the evaluation of RC Docker image.

3. Start the Voting for RC, which will include the Docker image as well as docker sanity tests report.

4. In case any docker image specific issue is detected, that will be evaluated by the community, if it’s a release blocker or not.

5. Once the vote passes, the image will be pushed to apache/kafka-native with the version as tag.

6. Steps for the Docker image release will be included in the Release Process doc of Apache Kafka

Docker Image release post AK Release

1. eg. for AK release 3.7.0 and image released will be apache/kafka-native:3.7.0 (=> image contains AK 3.7.0)

Ownership of the Docker Images' Release

...