-
Notifications
You must be signed in to change notification settings - Fork 278
/
Dockerfile
39 lines (33 loc) · 1.31 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
ARG BASEIMAGE=k8s.gcr.io/build-image/debian-base:bullseye-v1.4.1
FROM golang:1.18 as builder
WORKDIR /go/src/sigs.k8s.io/secrets-store-csi-driver
ADD . .
ARG TARGETARCH
ARG TARGETOS
ARG TARGETPLATFORM
ARG IMAGE_VERSION
RUN export GOOS=$TARGETOS && \
export GOARCH=$TARGETARCH && \
make build
FROM $BASEIMAGE
COPY --from=builder /go/src/sigs.k8s.io/secrets-store-csi-driver/_output/secrets-store-csi /secrets-store-csi
# upgrading libtirpc-common due to CVE-2021-46828
# upgrading libtirpc3 due to CVE-2021-46828
# upgrading libgnutls30 due to CVE-2022-2509
RUN clean-install ca-certificates mount libtirpc-common libtirpc3 libgnutls30
LABEL maintainers="ritazh"
LABEL description="Secrets Store CSI Driver"
ENTRYPOINT ["/secrets-store-csi"]