Building container images on Kubernetes with Kaniko

3 min read

When trying to build container images on Kubernetes we might be tempted to use the Docker in Docker approach: To do this you'll need to:

• Run a docker daemon on the nodes, either as a service or as a container runtime (which it is deprecated since 1.20)
• Allow the Pod to communicate with docker's socket

This approach is considered a security risk and it should be avoided.

As alternative, we can use kaniko: It is a tool to build container images inside containers (hence, Kubernetes clusters)

04/04/2022