FROM openshift/golang-builder:1.10 AS builder
ENV SOURCE_GIT_COMMIT=3f271e0951f18276ec54e8eac936725d6d68e073 SOURCE_GIT_TAG=v0.3.1-51-g3f271e09 SOURCE_DATE_EPOCH=1548907734
WORKDIR /go/src/github.com/brancz/kube-rbac-proxy
COPY . .
RUN make build && \
    cp _output/linux/$(go env GOARCH)/kube-rbac-proxy _output/kube-rbac-proxy

FROM openshift/ose-base:v4.1.6.20190710.122447
ENV SOURCE_GIT_COMMIT=3f271e0951f18276ec54e8eac936725d6d68e073 SOURCE_GIT_TAG=v0.3.1-51-g3f271e09 SOURCE_DATE_EPOCH=1548907734

ARG FROM_DIRECTORY=/go/src/github.com/brancz/kube-rbac-proxy
COPY --from=builder ${FROM_DIRECTORY}/_output/kube-rbac-proxy  /usr/bin/kube-rbac-proxy

USER nobody
EXPOSE 8080
ENTRYPOINT ["/usr/bin/kube-rbac-proxy"]

LABEL \
        io.k8s.description="This is a proxy, that can perform Kubernetes RBAC authorization." \
        com.redhat.component="kube-rbac-proxy-container" \
        maintainer="Frederic Branczyk <fbranczy@redhat.com>" \
        name="openshift/ose-kube-rbac-proxy" \
        License="ASL 2.0" \
        io.k8s.display-name="kube-rbac-proxy" \
        io.openshift.build.source-location="https://github.com/openshift/kube-rbac-proxy" \
        io.openshift.build.commit.url="https://github.com/openshift/kube-rbac-proxy/commit/3f271e0951f18276ec54e8eac936725d6d68e073" \
        version="v4.1.6" \
        io.openshift.build.commit.id="3f271e0951f18276ec54e8eac936725d6d68e073" \
        release="201907101224" \
        vendor="Red Hat" \
        io.openshift.tags="kubernetes"

