diff --git a/cmd/cli/kubectl-kyverno/Dockerfile b/cmd/cli/kubectl-kyverno/Dockerfile index 66fc1b7958..8ae8f02f35 100644 --- a/cmd/cli/kubectl-kyverno/Dockerfile +++ b/cmd/cli/kubectl-kyverno/Dockerfile @@ -25,13 +25,10 @@ RUN --mount=type=bind,target=. \ CGO_ENABLED=0 xx-go build -o /output/kyverno -ldflags="${LD_FLAGS}" -v ./cmd/cli/kubectl-kyverno/ # Packaging stage -FROM scratch +FROM ghcr.io/distroless/static:latest LABEL maintainer="Kyverno" COPY --from=builder /output/kyverno / -COPY --from=builder /etc/passwd /etc/passwd - -USER 10001 ENTRYPOINT ["./kyverno"] \ No newline at end of file diff --git a/cmd/initContainer/Dockerfile b/cmd/initContainer/Dockerfile index 20c7918543..041cd3a0b0 100644 --- a/cmd/initContainer/Dockerfile +++ b/cmd/initContainer/Dockerfile @@ -25,13 +25,11 @@ RUN --mount=type=bind,target=. \ CGO_ENABLED=0 xx-go build -o /output/kyvernopre -ldflags="${LD_FLAGS}" -v ./cmd/initContainer/ # Packaging stage -FROM scratch +FROM ghcr.io/distroless/static:latest LABEL maintainer="Kyverno" COPY --from=builder /output/kyvernopre / -COPY --from=builder /etc/passwd /etc/passwd -USER 10001 ENTRYPOINT ["./kyvernopre"] diff --git a/cmd/kyverno/Dockerfile b/cmd/kyverno/Dockerfile index d533091be3..d386857f24 100644 --- a/cmd/kyverno/Dockerfile +++ b/cmd/kyverno/Dockerfile @@ -29,13 +29,9 @@ RUN --mount=type=bind,target=. \ CGO_ENABLED=0 xx-go build -o /output/kyverno -ldflags="${LD_FLAGS}" -v ./cmd/kyverno/ # Packaging stage -FROM scratch +FROM ghcr.io/distroless/static:latest LABEL maintainer="Kyverno" COPY --from=builder /output/kyverno / -COPY --from=builder /etc/passwd /etc/passwd -COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ - -USER 10001 ENTRYPOINT ["./kyverno"]