FROM openshift/golang-builder:1.12 AS builder
ENV SOURCE_GIT_COMMIT=84e7dac69f8e3f90620729ee730327a3e168963d SOURCE_DATE_EPOCH=1572513918 BUILD_VERSION=v4.3.0 SOURCE_GIT_URL=https://github.com/openshift/kube-rbac-proxy SOURCE_GIT_TAG=v0.3.1-86-g84e7dac6 BUILD_RELEASE=202001211731
WORKDIR /go/src/github.com/brancz/kube-rbac-proxy
COPY . .
ENV GO111MODULE=on
# GOFLAGS is needed to build image without accessing external sources, mostly to comply with ART policies
ENV GOFLAGS="-mod=vendor"
RUN make build && \
    cp _output/linux/$(go env GOARCH)/kube-rbac-proxy _output/kube-rbac-proxy

FROM openshift/ose-base:v4.3.0.20200121.173126
ENV SOURCE_GIT_COMMIT=84e7dac69f8e3f90620729ee730327a3e168963d SOURCE_DATE_EPOCH=1572513918 BUILD_VERSION=v4.3.0 SOURCE_GIT_URL=https://github.com/openshift/kube-rbac-proxy SOURCE_GIT_TAG=v0.3.1-86-g84e7dac6 BUILD_RELEASE=202001211731

ARG FROM_DIRECTORY=/go/src/github.com/brancz/kube-rbac-proxy
COPY --from=builder ${FROM_DIRECTORY}/_output/kube-rbac-proxy  /usr/bin/kube-rbac-proxy

USER nobody
EXPOSE 8080
ENTRYPOINT ["/usr/bin/kube-rbac-proxy"]

LABEL \
        io.k8s.description="This is a proxy, that can perform Kubernetes RBAC authorization." \
        com.redhat.component="kube-rbac-proxy-container" \
        maintainer="Frederic Branczyk <fbranczy@redhat.com>" \
        name="openshift/ose-kube-rbac-proxy" \
        License="ASL 2.0" \
        io.k8s.display-name="kube-rbac-proxy" \
        io.openshift.build.source-location="https://github.com/openshift/kube-rbac-proxy" \
        io.openshift.build.commit.url="https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d" \
        version="v4.3.0" \
        io.openshift.build.commit.id="84e7dac69f8e3f90620729ee730327a3e168963d" \
        release="202001211731" \
        vendor="Red Hat" \
        io.openshift.tags="kubernetes"

