FROM openshift/golang-builder:1.12 AS builder
ENV SOURCE_GIT_COMMIT=878550ca31308b77ebe4bf5574440a1457ec7fe7 SOURCE_GIT_TAG=878550c SOURCE_GIT_URL=https://github.com/openshift/kubecsr SOURCE_DATE_EPOCH=1573176683 BUILD_VERSION=v4.3.3 BUILD_RELEASE=202002171705

WORKDIR /go/src/github.com/coreos/kubecsr

COPY . .

RUN make bin/kube-etcd-signer-server

# stage 2
FROM openshift/ose-base:v4.3.3.20200217.170535
ENV SOURCE_GIT_COMMIT=878550ca31308b77ebe4bf5574440a1457ec7fe7 SOURCE_GIT_TAG=878550c SOURCE_GIT_URL=https://github.com/openshift/kubecsr SOURCE_DATE_EPOCH=1573176683 BUILD_VERSION=v4.3.3 BUILD_RELEASE=202002171705

ENTRYPOINT ["/usr/bin/kube-etcd-signer-server"]

COPY --from=builder /go/src/github.com/coreos/kubecsr/bin/kube-etcd-signer-server /usr/bin/

LABEL \
        io.k8s.display-name="kube-etcd-signer-server" \
        io.k8s.description="The certificate signer approves a given valid CSR provided by the client agent and returns a signed certificate." \
        maintainer="Sam Batschelet <sbatsche@redhat.com>" \
        License="Apache 2.0" \
        io.openshift.tags="kube-etcd-signer-server" \
        name="openshift/ose-kube-etcd-signer-server" \
        com.redhat.component="ose-kube-etcd-signer-server-container" \
        version="v4.3.3" \
        release="202002171705" \
        io.openshift.build.commit.id="878550ca31308b77ebe4bf5574440a1457ec7fe7" \
        io.openshift.build.source-location="https://github.com/openshift/kubecsr" \
        io.openshift.build.commit.url="https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7"

