2020-09-08 11:29:34 -05:00
|
|
|
# Copyright 2020 VMware, Inc.
|
|
|
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
|
|
|
|
|
|
# Use a runtime image based on Debian slim
|
2020-12-15 13:37:11 -06:00
|
|
|
FROM debian:10.7-slim
|
2020-09-08 11:29:34 -05:00
|
|
|
|
|
|
|
|
# Copy the binary which was built outside the container.
|
2020-10-09 14:25:34 -07:00
|
|
|
COPY build/pinniped-concierge /usr/local/bin/pinniped-concierge
|
2020-09-08 11:29:34 -05:00
|
|
|
|
|
|
|
|
# Document the port
|
2020-11-02 11:57:05 -05:00
|
|
|
EXPOSE 8443
|
2020-09-08 11:29:34 -05:00
|
|
|
|
2020-11-02 16:32:50 -05:00
|
|
|
# Run as non-root for security posture
|
2020-11-10 09:27:44 -08:00
|
|
|
# Commented out because it breaks the live-reload feature of Tilt. See https://github.com/tilt-dev/tilt/issues/2300
|
|
|
|
|
# Be aware that this creates a significant difference between running with Tilt and running otherwise.
|
|
|
|
|
#USER 1001:1001
|
2020-11-02 16:32:50 -05:00
|
|
|
|
2020-09-08 11:29:34 -05:00
|
|
|
# Set the entrypoint
|
2020-10-09 14:25:34 -07:00
|
|
|
ENTRYPOINT ["/usr/local/bin/pinniped-concierge"]
|
