mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 17:37:12 +00:00
c8a41d83f7
* - run Kyverno with specific uid; - remove "runAsUser" from deployment manifest Signed-off-by: Shuting Zhao <shutting06@gmail.com> * add LD_FLAGS when push Kyverno images Signed-off-by: Shuting Zhao <shutting06@gmail.com> * start Kyverno with UID 10001 Signed-off-by: Shuting Zhao <shutting06@gmail.com> * update initContainer and CLI Dockerfiles Signed-off-by: Shuting Zhao <shutting06@gmail.com>
31 lines
669 B
Docker
31 lines
669 B
Docker
# Multi-stage docker build
|
|
# Build stage
|
|
FROM golang:1.14 AS builder
|
|
|
|
LABEL maintainer="Kyverno"
|
|
|
|
# LD_FLAGS is passed as argument from Makefile. It will be empty, if no argument passed
|
|
ARG LD_FLAGS
|
|
ARG TARGETPLATFORM
|
|
|
|
ADD . /kyverno
|
|
WORKDIR /kyverno
|
|
|
|
RUN export GOOS=$(echo ${TARGETPLATFORM} | cut -d / -f1) && \
|
|
export GOARCH=$(echo ${TARGETPLATFORM} | cut -d / -f2)
|
|
|
|
RUN go env
|
|
|
|
RUN CGO_ENABLED=0 go build -o /output/kyvernopre -ldflags="${LD_FLAGS}" -v ./cmd/initContainer/
|
|
|
|
# Packaging stage
|
|
FROM scratch
|
|
|
|
LABEL maintainer="Kyverno"
|
|
|
|
COPY --from=builder /output/kyvernopre /
|
|
COPY --from=builder /etc/passwd /etc/passwd
|
|
|
|
USER 10001
|
|
|
|
ENTRYPOINT ["./kyvernopre"]
|