ci: use kaniko builder (#3183)

* ci: use kaniko builder

* ci: fix gcloud sdk installation

* ci: remove privileged flag

ci/image/Dockerfile

@@ -4,6 +4,7 @@ RUN apk update \
   && apk add bash curl wget tar git jq make perl-utils python3 \
   && apk add yq --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community
 
+ENV CLOUDSDK_CORE_DISABLE_PROMPTS 1
 RUN curl -sSL https://sdk.cloud.google.com | bash
 ENV PATH $PATH:/root/google-cloud-sdk/bin
 

ci/pipeline.yml

@@ -319,21 +319,26 @@ jobs:
   - get: pipeline-image-def
     trigger: true
   - task: build
-    privileged: true
     config:
       platform: linux
       image_resource:
         type: registry-image
         source:
-          repository: vito/oci-build-task
+          repository: gcr.io/kaniko-project/executor
+          tag: debug
       inputs:
       - name: pipeline-image-def
       outputs:
       - name: image
-      params:
-        CONTEXT: pipeline-image-def/ci/image
       run:
-        path: build
+        path: /kaniko/executor
+        args:
+        - --context=pipeline-image-def/ci/image
+        - --use-new-run
+        - --single-snapshot
+        - --cache=false
+        - --no-push
+        - --tar-path=image/image.tar
   - put: pipeline-image
     params:
       image: image/image.tar