FROM openshift/golang-builder:1.11 AS builder
ENV SOURCE_GIT_COMMIT=2658b2444b9992ea474177c73ca9f40f68f04304 SOURCE_DATE_EPOCH=1563181479 BUILD_VERSION=v4.2.4 SOURCE_GIT_URL=https://github.com/openshift/kube-rbac-proxy SOURCE_GIT_TAG=v0.3.1-80-g2658b244 BUILD_RELEASE=201911050122
WORKDIR /go/src/github.com/brancz/kube-rbac-proxy
COPY . .
ENV GO111MODULE=on
# GOFLAGS is needed to build image without accessing external sources, mostly to comply with ART policies
ENV GOFLAGS="-mod=vendor"
RUN make build && \
    cp _output/linux/$(go env GOARCH)/kube-rbac-proxy _output/kube-rbac-proxy

FROM openshift/ose-base:v4.2.4.20191105.012255
ENV SOURCE_GIT_COMMIT=2658b2444b9992ea474177c73ca9f40f68f04304 SOURCE_DATE_EPOCH=1563181479 BUILD_VERSION=v4.2.4 SOURCE_GIT_URL=https://github.com/openshift/kube-rbac-proxy SOURCE_GIT_TAG=v0.3.1-80-g2658b244 BUILD_RELEASE=201911050122

ARG FROM_DIRECTORY=/go/src/github.com/brancz/kube-rbac-proxy
COPY --from=builder ${FROM_DIRECTORY}/_output/kube-rbac-proxy  /usr/bin/kube-rbac-proxy

USER nobody
EXPOSE 8080
ENTRYPOINT ["/usr/bin/kube-rbac-proxy"]

LABEL \
        io.k8s.description="This is a proxy, that can perform Kubernetes RBAC authorization." \
        com.redhat.component="kube-rbac-proxy-container" \
        maintainer="Frederic Branczyk <fbranczy@redhat.com>" \
        name="openshift/ose-kube-rbac-proxy" \
        License="ASL 2.0" \
        io.k8s.display-name="kube-rbac-proxy" \
        io.openshift.build.source-location="https://github.com/openshift/kube-rbac-proxy" \
        io.openshift.build.commit.url="https://github.com/openshift/kube-rbac-proxy/commit/2658b2444b9992ea474177c73ca9f40f68f04304" \
        version="v4.2.4" \
        io.openshift.build.commit.id="2658b2444b9992ea474177c73ca9f40f68f04304" \
        release="201911050122" \
        vendor="Red Hat" \
        io.openshift.tags="kubernetes"

