rook: add basic build of binaries and container

In order to manage our disk cluster, we need a build of rook. Our
software supply chain standards mean that we have to build it
ourselves.

We also need to pull in numerous Rook dependencies, update the version
of at least one dependency, build tini, and package up Rook in a usable
OCI.

Author: celskeggs

platform/WORKSPACE

@@ -105,6 +105,10 @@ load("//oci-tools:deps.bzl", "oci_tools_dependencies")
 
 oci_tools_dependencies()
 
+load("//rook:deps.bzl", "rook_dependencies")
+
+rook_dependencies()
+
 load("//runc:deps.bzl", "runc_dependencies")
 
 runc_dependencies()

platform/etcd/deps.bzl

@@ -1,6 +1,8 @@
 load("@bazel_gazelle//:deps.bzl", "go_repository")
 
 def etcd_dependencies():
+    # WARNING: etcd is pulled in twice! once here, and once as a dependency for Rook!
+    # These are not necessarily the same version, and the other one doesn't use vendored deps!
     go_repository(
         name = "etcd",
         commit = "d57e8b8d97adfc4a6c224fe116714bf1a1f3beb9",  # 3.3.12

platform/go/helper.bzl

@@ -0,0 +1,8 @@
+def importpath_to_repo_name(importpath):
+    """
+    Takes in a path like "github.com/coreos/go-systemd" and produces a
+    repository name like "com_github_coreos_go_systemd".
+    """
+    parts = importpath.lower().replace("-", "_").split("/")
+    hostname_parts = parts[0].split(".")
+    return "_".join(hostname_parts[::-1] + parts[1:]).replace(".", "_")

platform/kubernetes/deps.bzl

@@ -4,52 +4,6 @@ load("@bazel_gazelle//:deps.bzl", "go_repository")
 
 # kubernetes client application (like flannel-monitor) dependencies
 def kubernetes_client_dependencies():
-    go_repository(
-        name = "io_k8s_apimachinery",
-        commit = "6a84e37a896db9780c75367af8d2ed2bb944022e",  # 1.14.1
-        importpath = "k8s.io/apimachinery",
-        build_file_proto_mode = "disable_global",
-    )
-
-    go_repository(
-        name = "io_k8s_client_go",
-        commit = "1a26190bd76a9017e289958b9fba936430aa3704",  # 1.14.1
-        importpath = "k8s.io/client-go",
-        build_file_proto_mode = "disable_global",
-    )
-
-    go_repository(
-        name = "io_k8s_api",
-        commit = "6e4e0e4f393bf5e8bbff570acd13217aa5a770cd",  # 1.14.1
-        importpath = "k8s.io/api",
-        build_file_proto_mode = "disable_global",
-    )
-
-    go_repository(
-        name = "com_github_imdario_mergo",
-        commit = "9316a62528ac99aaecb4e47eadd6dc8aa6533d58",
-        importpath = "github.com/imdario/mergo",
-    )
-
-    go_repository(
-        name = "com_github_google_gofuzz",
-        commit = "24818f796faf91cd76ec7bddd72458fbced7a6c1",
-        importpath = "github.com/google/gofuzz",
-    )
-
-    go_repository(
-        name = "io_k8s_kube_openapi",
-        commit = "b3a7cee44a305be0a69e1b9ac03018307287e1b0",
-        importpath = "k8s.io/kube-openapi",
-    )
-
-    go_repository(
-        name = "com_github_googleapis_gnostic",
-        commit = "0c5108395e2debce0d731cf0287ddf7242066aba",
-        importpath = "github.com/googleapis/gnostic",
-        build_file_proto_mode = "disable_global",
-    )
-
     go_repository(
         name = "com_github_gregjones_httpcache",
         commit = "787624de3eb7bd915c329cba748687a3b22666a6",
@@ -62,90 +16,6 @@ def kubernetes_client_dependencies():
         importpath = "github.com/peterbourgon/diskv",
     )
 
-    go_repository(
-        name = "com_github_json_iterator_go",
-        commit = "ab8a2e0c74be9d3be70b3184d9acc634935ded82",
-        importpath = "github.com/json-iterator/go",
-    )
-
-    go_repository(
-        name = "com_github_google_btree",
-        commit = "7d79101e329e5a3adf994758c578dab82b90c017",
-        importpath = "github.com/google/btree",
-    )
-
-    go_repository(
-        name = "in_gopkg_inf_v0",
-        commit = "3887ee99ecf07df5b447e9b00d9c0b2adaa9f3e4",
-        importpath = "gopkg.in/inf.v0",
-    )
-
-    go_repository(
-        name = "com_github_spf13_pflag",
-        commit = "583c0c0531f06d5278b7d917446061adc344b5cd",
-        importpath = "github.com/spf13/pflag",
-    )
-
-    go_repository(
-        name = "org_golang_x_time",
-        commit = "f51c12702a4d776e4c1fa9b0fabab841babae631",
-        importpath = "golang.org/x/time",
-    )
-
-    go_repository(
-        name = "com_github_modern_go_reflect2",
-        commit = "94122c33edd36123c84d5368cfb2b69df93a0ec8",
-        importpath = "github.com/modern-go/reflect2",
-    )
-
-    go_repository(
-        name = "com_github_modern_go_concurrent",
-        commit = "bacd9c7ef1dd9b15be4a9909b8ac7a4e313eec94",
-        importpath = "github.com/modern-go/concurrent",
-    )
-
-    go_repository(
-        name = "org_golang_x_net",
-        commit = "da137c7871d730100384dbcf36e6f8fa493aef5b",
-        importpath = "golang.org/x/net",
-    )
-
-    go_repository(
-        name = "org_golang_x_oauth2",
-        commit = "a6bd8cefa1811bd24b86f8902872e4e8225f74c4",
-        importpath = "golang.org/x/oauth2",
-    )
-
-    go_repository(
-        name = "org_golang_x_text",
-        commit = "f21a4dfb5e38f5895301dc265a8def02365cc3d0",  # 0.3.0
-        importpath = "golang.org/x/text",
-    )
-
-    go_repository(
-        name = "io_k8s_klog",
-        commit = "8e90cee79f823779174776412c13478955131846",
-        importpath = "k8s.io/klog",
-    )
-
-    go_repository(
-        name = "io_k8s_sigs_yaml",
-        commit = "fd68e9863619f6ec2fdd8625fe1f02e7c877e480",
-        importpath = "sigs.k8s.io/yaml",
-    )
-
-    go_repository(
-        name = "io_k8s_utils",
-        commit = "c2654d5206da6b7b6ace12841e8f359bb89b443c",
-        importpath = "k8s.io/utils",
-    )
-
-    go_repository(
-        name = "com_github_davecgh_go_spew",
-        commit = "782f4967f2dc4564575ca782fe2d04090b5faca8",
-        importpath = "github.com/davecgh/go-spew",
-    )
-
 def kubernetes_dependencies():
     git_repository(
         name = "io_k8s_repo_infra",

platform/rook/BUILD.bazel

@@ -0,0 +1,25 @@
+load("//bazel:package.bzl", "homeworld_oci")
+
+homeworld_oci(
+    name = "oci",
+    bin = {
+        "//rook/tini": "/tini",
+        "@com_github_rook_rook//cmd/rook": "/usr/local/bin/rook",
+        "@com_github_rook_rook//cmd/rookflex": "/usr/local/bin/rookflex",
+        "@com_github_rook_rook//images/ceph:toolbox.sh": "/usr/local/bin/toolbox.sh",
+    },
+    data = {
+        "@com_github_rook_rook//cluster/examples/kubernetes/ceph:csi/template": "/etc/ceph-csi",
+        "@com_github_rook_rook//cluster/examples/kubernetes/ceph:monitoring": "/etc/ceph-monitoring",
+        # note: /etc/ceph-csv-templates (which is included in upstream) is not included in this OCI.
+        # this is because building it could be complicated, and it's not necessary if we aren't using
+        # the Operator Lifecycle Manager.
+    },
+    exec = [
+        "/tini",
+        "--",
+        "/usr/local/bin/rook",
+    ],
+    oci_dep = "//ceph:oci",
+    visibility = ["//visibility:public"],
+)

platform/rook/deps.bzl

@@ -0,0 +1,149 @@
+load("@bazel_gazelle//:deps.bzl", "go_repository")
+load("//go:helper.bzl", "importpath_to_repo_name")
+load("//rook/tini:deps.bzl", "tini_dependencies")
+
+# WARNING: etcd is pulled in twice! once to build the etcd binaries, and once here!
+# These are not necessarily the same version, and the other one uses vendored dependencies!
+# The same applies to kubernetes!
+
+# these versions are extracted from the Rook go.sum file
+ROOK_DEPS = """
+github.com/aws/aws-sdk-go v1.16.26 h1:GWkl3rkRO/JGRTWoLLIqwf7AWC4/W/1hMOUZqmX0js4=
+github.com/banzaicloud/k8s-objectmatcher v1.1.0 h1:KHWn9Oxh21xsaGKBHWElkaRrr4ypCDyrh15OB1zHtAw=
+github.com/blang/semver v3.5.1+incompatible h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ=
+github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e h1:Wf6HqHfScWJN9/ZjdUKyjop4mf3Qdd+1TvvltAvM3m8=
+github.com/coreos/pkg v0.0.0-20180108230652-97fdf19511ea h1:n2Ltr3SrfQlf/9nOna1DoGKxLx3qTSI8Ttl6Xrqp6mw=
+github.com/coreos/prometheus-operator v0.34.0 h1:TF9qaydNeUamLKs0hniaapa4FBz8U8TIlRRtJX987A4=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/emicklei/go-restful v2.10.0+incompatible h1:l6Soi8WCOOVAeCo4W98iBFC6Og7/X8bpRt51oNLZ2C8=
+github.com/evanphx/json-patch v4.5.0+incompatible h1:ouOWdg56aJriqS0huScTkVXPC5IcNrDCXZ6OoTAWu7M=
+github.com/fsnotify/fsnotify v1.4.7 h1:IXs+QLmnXW2CcXuY+8Mzv/fWEsPGWxqefPtCP5CnV9I=
+github.com/ghodss/yaml v1.0.0 h1:wQHKEahhL6wmXdzwWG11gIVCkOv05bNOh+Rxn0yngAk=
+github.com/go-ini/ini v1.51.1 h1:/QG3cj23k5V8mOl4JnNzUNhc1kr/jzMiNsNuWKcx8gM=
+github.com/golang/groupcache v0.0.0-20191027212112-611e8accdfc9 h1:uHTyIjqVhYRhLbJ8nIiOJHkEZZ+5YoOsAbD3sk82NiE=
+github.com/go-logr/logr v0.1.0 h1:M1Tv3VzNlEHg6uyACnRdtrploV2P7wZqH8BoQMtz0cg=
+github.com/googleapis/gnostic v0.3.1 h1:WeAefnSUHlBb0iJKwxFDZdbfGwkd7xRNuV+IpXMJhYk=
+github.com/google/btree v1.0.0 h1:0udJVsspx3VBr5FwtLhQQtuAsVc79tTq0ocGIPAU6qo=
+github.com/google/go-cmp v0.3.1 h1:Xye71clBPdm5HgqGwUkwhbynsUJZhDbS20FvLhQ2izg=
+github.com/google/gofuzz v1.0.0 h1:A8PeW59pxE9IoFRqBp37U+mSNaQoZ46F1f0f863XSXw=
+github.com/google/uuid v1.1.1 h1:Gkbcsh/GbpXz7lPftLA3P6TYMwjCLYm83jiFQZF/3gY=
+github.com/go-openapi/jsonpointer v0.19.3 h1:gihV7YNZK1iK6Tgwwsxo2rJbD1GTbdm72325Bq8FI3w=
+github.com/go-openapi/jsonreference v0.19.3 h1:5cxNfTy0UVC3X8JL5ymxzyoUZmo8iZb+jeTWn7tUa8o=
+github.com/go-openapi/spec v0.19.3 h1:0XRyw8kguri6Yw4SxhsQA/atC88yqrk0+G4YhI2wabc=
+github.com/go-openapi/swag v0.19.5 h1:lTz6Ys4CmqqCQmZPBlbQENR1/GucA2bzYTE12Pw4tFY=
+github.com/goph/emperror v0.17.2 h1:yLapQcmEsO0ipe9p5TaN22djm3OFV/TfM/fcYP0/J18=
+github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho=
+github.com/hashicorp/golang-lru v0.5.3 h1:YPkqC67at8FYaadspW/6uE0COsBxS2656RLEr8Bppgk=
+github.com/hashicorp/go-version v1.2.0 h1:3vNe/fWF5CBgRIguda1meWhsZHy3m8gCJ5wx+dIzX/E=
+github.com/imdario/mergo v0.3.7 h1:Y+UAYTZ7gDEuOfhxKWy+dvb5dRQ6rJjFSdX2HZY1/gI=
+github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af h1:pmfjZENx5imkbgOkpRUYLnmbU7UEFbjtDA2hxJ1ichM=
+github.com/json-iterator/go v1.1.8 h1:QiWkFLKq0T7mpzwOTu6BzNDbfTE8OLrYhVKYMLF46Ok=
+github.com/k8snetworkplumbingwg/network-attachment-definition-client v0.0.0-20200401090632-ee27f62faef8 h1:/+OIW+inkJRBJlIHQqMUXRbYHmQLZwj7lqIV/TUecsE=
+github.com/kube-object-storage/lib-bucket-provisioner v0.0.0-20200107223247-51020689f1fb h1:0tLk5jekrSwmQJqoyHW6oVAdfG7DbLAaobKcURwCRoY=
+github.com/mailru/easyjson v0.7.0 h1:aizVhC/NAAcKWb+5QsU1iNOZb4Yws5UO2I+aIprQITM=
+github.com/miekg/dns v1.1.4 h1:rCMZsU2ScVSYcAsOXgmC6+AKOK+6pmQTOcw03nfwYV0=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/reflect2 v1.0.1 h1:9f412s+6RmYXLWZSEzVVgPGK7C2PphHj5RJrvfx9AWI=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
+github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46 h1:lsxEuwrXEAokXB9qhlbKWPpo3KMLZQ5WB5WLQRW1uq0=
+github.com/openshift/cluster-api v0.0.0-20191129101638-b09907ac6668 h1:IDZyg/Kye98ptqpc9j9rzPjZJlijjEDe8g7TZ67CmLU=
+github.com/openshift/machine-api-operator v0.2.1-0.20190903202259-474e14e4965a h1:mcl6pEpG0ZKeMnAMhtmcoy7jFY8PcMRHmxdRQmowxo4=
+github.com/pborman/uuid v1.2.0 h1:J7Q5mO4ysT1dv8hyrUGHb9+ooztCXu1D8MY8DZYsu3g=
+github.com/PuerkitoBio/purell v1.1.1 h1:WEQqlqaGbrPkxLJWfBwQmfEAE1Z7ONdDLqrN38tNFfI=
+github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 h1:d+Bc7a5rLufV/sSk/8dngufqelfh6jnri85riMAaF/M=
+github.com/spf13/afero v1.2.2 h1:5jhuqJyZCZf2JRofRvN/nIFgIWNzPa3/Vz8mYylgbWc=
+github.com/spf13/cobra v0.0.5 h1:f0B+LkLX6DtmRH1isoNA9VTtNUK9K8xYd28JNNfOv/s=
+github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/yanniszark/go-nodetool v0.0.0-20191206125106-cd8f91fa16be h1:e8XjnroTyruokenelQLRje3D3nbti3ol45daXg5iWUA=
+go.etcd.io/etcd v0.0.0-20191023171146-3cf2f69b5738 h1:VcrIfasaLFkyjk6KNlXQSzO+B0fZcnECiDrKJsfxka0=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b h1:0mm1VjtFUOIlE1SbDlwjYaDxZVDP2S5ou6y0gSgXHu8=
+golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45 h1:SVwTIAaPC2U/AvvLNZ2a7OVsmBpC8L5BlwK1whH3hm0=
+golang.org/x/text v0.3.2 h1:tW2bmiBqwgJj/UpqtC8EpXEZVYOwU0yG4iWbprSVAcs=
+golang.org/x/time v0.0.0-20191024005414-555d28b269f0 h1:/5xXl8Y5W96D+TtHSlonuFqGHIWVuyCkGJLwGh9JJFs=
+gomodules.xyz/jsonpatch/v2 v2.0.1 h1:xyiBuvkD2g5n7cYzx6u2sxQvsAy4QJsZFCzGVdzOXZ0=
+google.golang.org/grpc v1.23.1 h1:q4XQuHFC6I28BKZpo6IYyb3mNO+l7lSOxRuYTCiDfXk=
+gopkg.in/fsnotify.v1 v1.4.7 h1:xOHLXZwVvI9hhs+cLKq5+I5onOuwQLhQwiu63xxlHs4=
+gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/square/go-jose.v2 v2.2.2 h1:orlkJ3myw8CN1nVQHBFfloD+L3egixIa4FvUP6RosSA=
+go.uber.org/atomic v1.4.0 h1:cxzIVoETapQEqDhQu3QfnvXAV4AlzcvUCxkVUFw3+EU=
+go.uber.org/multierr v1.1.0 h1:HoEmRHQPVSqub6w2z2d2EOVs2fjyFRGyofhKuyDq0QI=
+go.uber.org/zap v1.10.0 h1:ORx85nbTijNz8ljznvCMR1ZBIPKFn3jQrag10X2AsuM=
+k8s.io/apiextensions-apiserver v0.17.2 h1:cP579D2hSZNuO/rZj9XFRzwJNYb41DbNANJb6Kolpss=
+k8s.io/apimachinery v0.17.2 h1:hwDQQFbdRlpnnsR64Asdi55GyCaIP/3WQpMmbNBeWr4=
+k8s.io/apiserver v0.17.2 h1:NssVvPALll6SSeNgo1Wk1h2myU1UHNwmhxV0Oxbcl8Y=
+k8s.io/api v0.17.2 h1:NF1UFXcKN7/OOv1uxdRz3qfra8AHsPav5M93hlV9+Dc=
+k8s.io/client-go v0.17.2 h1:ndIfkfXEGrNhLIgkr0+qhRguSD3u6DCmonepn1O6NYc=
+k8s.io/cloud-provider v0.17.2 h1:5JVAaJ3JIlaXlOqAX/LkdnXPl1UlcjHMPbepo8LFcyo=
+k8s.io/component-base v0.17.2 h1:0XHf+cerTvL9I5Xwn9v+0jmqzGAZI7zNydv4tL6Cw6A=
+k8s.io/klog v1.0.0 h1:Pt+yjF5aB1xDSVbau4VsWe+dQNzA0qv1LlXdC2dF6Q8=
+k8s.io/kube-controller-manager v0.17.2 h1:YqE2AM6YzSppRHjmxHSZn6FiXNy6hTpRPEa2SYpHV5s=
+k8s.io/kube-openapi v0.0.0-20191107075043-30be4d16710a h1:UcxjrRMyNx/i/y8G7kPvLyy7rfbeuf1PYyBf973pgyU=
+k8s.io/kubernetes v1.17.2 h1:g1UFZqFQsYx88xMUks4PKC6tsNcekxe0v06fcVGRwVE=
+k8s.io/utils v0.0.0-20191114200735-6ca3b61696b6 h1:p0Ai3qVtkbCG/Af26dBmU0E1W58NID3hSSh7cMyylpM=
+sigs.k8s.io/controller-runtime v0.5.1 h1:TNidCfVoU/cs2i+9xoTcL/l7yhl0bDhYXU0NCG6wmiE=
+sigs.k8s.io/sig-storage-lib-external-provisioner v4.1.0+incompatible h1:pp7GUmQZKI57EjGnjkY88V4QbVuMpkw/ijKXqL67EsI=
+sigs.k8s.io/structured-merge-diff v1.0.1-0.20191108220359-b1b620dd3f06 h1:zD2IemQ4LmOcAumeiyDWXKUI2SO0NYDe3H6QGvPOVgU=
+sigs.k8s.io/structured-merge-diff v1.0.1-0.20191108220359-b1b620dd3f06 h1:zD2IemQ4LmOcAumeiyDWXKUI2SO0NYDe3H6QGvPOVgU=
+sigs.k8s.io/yaml v1.1.0 h1:4A07+ZFc2wgJwo8YNlQpr1rVlgUDlxXHhPJciaPY5gs=
+"""
+
+# This is a set of workarounds that prevents the invocation of certain 'go list' commands by gazelle.
+# When the go list commands are run for packages within these modules, they fail for reasons like:
+# "things got renamed and now the master branch and the requested version have different package structures"
+# Since gazelle only needs to use 'go list' to determine module boundaries, we can just specify particular
+# module boundaries when we invoke go_repository, and avoid the whole problem.
+KNOWN_IMPORTS = [
+    # needed because of the unusual things kubernetes does to handle splitting out one monorepo into a bunch of separate repositories
+    "k8s.io/kubernetes",
+    # needed because of https://github.com/bazelbuild/bazel-gazelle/issues/545 affecting github.com/googleapis/gnostic/OpenAPIv2
+    "github.com/googleapis/gnostic",
+    # needed because of https://github.com/kubernetes/client-go/issues/749
+    "k8s.io/client-go",
+    # these two are needed because something's broken in etcd w/r/t renaming modules
+    "go.etcd.io/etcd",
+    "github.com/coreos/go-systemd",
+    # unclear why this is needed
+    "golang.org/x/sys",
+    # needed because of a repository rename
+    "github.com/improbable-eng/thanos",
+]
+
+def rook_dependencies():
+    args = [
+        "-exclude=vendor",
+    ]
+    for importpath in KNOWN_IMPORTS:
+        args += ["-known_import", importpath]
+
+    for line in ROOK_DEPS.split("\n"):
+        if not line.strip():
+            continue
+        importpath, version, sum = line.split(" ")
+        go_repository(
+            name = importpath_to_repo_name(importpath),
+            version = version,
+            sum = sum,
+            importpath = importpath,
+            build_external = "external",
+            build_extra_args = args,
+            build_file_proto_mode = "disable_global",
+            prepatch_cmds = [
+                "find -name BUILD -delete",
+                "find -name BUILD.bazel -delete",
+                "rm -rf vendor",
+            ],
+        )
+
+    tini_dependencies()
+
+    go_repository(
+        name = "com_github_rook_rook",
+        build_extra_args = args,
+        version = "v1.3.3",
+        sum = "h1:L28rGUcqexFOu72WrstS8K09PRumLBXVjArnWnAp8bU=",
+        importpath = "github.com/rook/rook",
+        patch_cmds = [
+            "echo \"exports_files(['toolbox.sh'])\" >images/ceph/BUILD.bazel",
+            "echo \"exports_files(['csi/template', 'monitoring'])\" >cluster/examples/kubernetes/ceph/BUILD.bazel",
+        ],
+    )

platform/rook/tini/BUILD.bazel

@@ -0,0 +1,18 @@
+load("@rules_foreign_cc//tools/build_defs:cmake.bzl", "cmake_external")
+load("//ceph:unpack.bzl", "unpack_filegroup")
+
+cmake_external(
+    name = "tini-cmake",
+    binaries = [
+        "tini",
+    ],
+    lib_source = "@tini//:source",
+)
+
+unpack_filegroup(
+    src = ":tini-cmake",
+    names = [
+        "tini",
+    ],
+    visibility = ["//visibility:public"],
+)

platform/rook/tini/deps.bzl

@@ -0,0 +1,10 @@
+load("@bazel_tools//tools/build_defs/repo:git.bzl", "new_git_repository")
+
+def tini_dependencies():
+    new_git_repository(
+        name = "tini",
+        commit = "fec3683b971d9c3ef73f284f176672c44b448662",
+        remote = "https://github.com/krallin/tini",
+        shallow_since = "1524295900 +0200",
+        build_file_content = """filegroup(name = "source", srcs = glob(["**"]), visibility = ["//visibility:public"])""",
+    )

platform/upload/BUILD.bazel

@@ -13,6 +13,7 @@ ocis = {
     "kube-dns-sidecar": "//kube-dns:kube-dns-sidecar",
     "pause": "//cri-o/pause:oci",
     "pullcheck": "//pull-monitor/pullcheck:oci",
+    "rook": "//rook:oci",
     "user-grant": "//user-grant:oci",
 }