FROM openshift/golang-builder:1.11 AS builder
ENV SOURCE_GIT_COMMIT=227189dae8e64eca5ad13a8bb96df8d8d5502f35 SOURCE_DATE_EPOCH=1562904198 BUILD_VERSION=v4.2.4 SOURCE_GIT_URL=https://github.com/openshift/kubecsr SOURCE_GIT_TAG=227189d BUILD_RELEASE=201911050122

WORKDIR /go/src/github.com/coreos/kubecsr

COPY . .

RUN make bin/kube-etcd-signer-server

# stage 2
FROM openshift/ose-base:v4.2.4.20191105.012255
ENV SOURCE_GIT_COMMIT=227189dae8e64eca5ad13a8bb96df8d8d5502f35 SOURCE_DATE_EPOCH=1562904198 BUILD_VERSION=v4.2.4 SOURCE_GIT_URL=https://github.com/openshift/kubecsr SOURCE_GIT_TAG=227189d BUILD_RELEASE=201911050122

ENTRYPOINT ["/usr/bin/kube-etcd-signer-server"]

COPY --from=builder /go/src/github.com/coreos/kubecsr/bin/kube-etcd-signer-server /usr/bin/

LABEL \
        io.k8s.description="The certificate signer approves a given valid CSR provided by the client agent and returns a signed certificate." \
        com.redhat.component="ose-kube-etcd-signer-server-container" \
        maintainer="Sam Batschelet <sbatsche@redhat.com>" \
        name="openshift/ose-kube-etcd-signer-server" \
        License="Apache 2.0" \
        io.k8s.display-name="kube-etcd-signer-server" \
        io.openshift.build.source-location="https://github.com/openshift/kubecsr" \
        io.openshift.build.commit.url="https://github.com/openshift/kubecsr/commit/227189dae8e64eca5ad13a8bb96df8d8d5502f35" \
        version="v4.2.4" \
        io.openshift.build.commit.id="227189dae8e64eca5ad13a8bb96df8d8d5502f35" \
        release="201911050122" \
        io.openshift.tags="kube-etcd-signer-server"

